General

  • Target

    0350eefbedbe217a970efe85974dfcac_JaffaCakes118

  • Size

    886KB

  • Sample

    240930-1asdzazejb

  • MD5

    0350eefbedbe217a970efe85974dfcac

  • SHA1

    3ae241425fca235e2822143749f4d9a1b492aeec

  • SHA256

    b281bab92ba2b523b836ef70d3ca62dfbea001c0167e871df29bcc1afecfbed1

  • SHA512

    013143931bb6c1ab61e48ea2b177b3ff35874d97f7cc8da239367983a8ea1e0569f18a978a5fe97defff71eb84be362b0effe609249e1438490bd8ac93bddbd9

  • SSDEEP

    24576:2pj/R8I3y6ImvJUv0LUwghKna10N3dH3:O/KWghQH

Malware Config

Extracted

Family

qakbot

Version

402.343

Botnet

tr

Campaign

1632730751

C2

95.77.223.148:443

47.22.148.6:443

89.101.97.139:443

27.223.92.142:995

120.151.47.189:443

136.232.34.70:443

120.150.218.241:995

185.250.148.74:443

181.118.183.94:443

140.82.49.12:443

67.165.206.193:993

103.148.120.144:443

71.74.12.34:443

76.25.142.196:443

73.151.236.31:443

173.21.10.71:2222

75.188.35.168:443

2.178.88.145:61202

71.80.168.245:443

45.46.53.140:2222

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      0350eefbedbe217a970efe85974dfcac_JaffaCakes118

    • Size

      886KB

    • MD5

      0350eefbedbe217a970efe85974dfcac

    • SHA1

      3ae241425fca235e2822143749f4d9a1b492aeec

    • SHA256

      b281bab92ba2b523b836ef70d3ca62dfbea001c0167e871df29bcc1afecfbed1

    • SHA512

      013143931bb6c1ab61e48ea2b177b3ff35874d97f7cc8da239367983a8ea1e0569f18a978a5fe97defff71eb84be362b0effe609249e1438490bd8ac93bddbd9

    • SSDEEP

      24576:2pj/R8I3y6ImvJUv0LUwghKna10N3dH3:O/KWghQH

MITRE ATT&CK Enterprise v15

Tasks