General
-
Target
14bcfaa8f83de0d941d512f53c257103_JaffaCakes118
-
Size
708KB
-
Sample
241004-yqndvaxhla
-
MD5
14bcfaa8f83de0d941d512f53c257103
-
SHA1
a1f38d75b7c8c0add0a4fc76fc2fbde08f5acdd8
-
SHA256
f8e65caf7f0e6996f5a956af9d4258273fe30185aa2b06d74b2fdd7ba33f1f85
-
SHA512
634516818f31c58342d3283faec4b611a334fce9013be9611b70aac289de0a5115a3f8dc688b3f1ad07c7d64a47565aa399d2259ed4285cd43568712111b7705
-
SSDEEP
12288:DsbAcis08s7gQFMWC24/MFS+AWmdXWJIjJ5F3+DpEFs3H6v/+xoTNp:DODis0dFA24/MFSptoJKnx+NE23a3+x4
Static task
static1
Behavioral task
behavioral1
Sample
14bcfaa8f83de0d941d512f53c257103_JaffaCakes118.dll
Resource
win7-20240704-en
Malware Config
Extracted
qakbot
402.363
obama106
1632905607
37.210.152.224:995
120.151.47.189:443
105.198.236.99:443
122.11.220.212:2222
199.27.127.129:443
41.251.41.14:995
216.201.162.158:443
124.123.42.115:2078
181.118.183.94:443
120.150.218.241:995
185.250.148.74:443
217.17.56.163:443
182.181.78.18:995
140.82.49.12:443
105.159.144.186:995
89.101.97.139:443
217.17.56.163:0
27.223.92.142:995
95.77.223.148:443
109.190.253.11:2222
81.250.153.227:2222
190.198.206.189:2222
81.241.252.59:2078
136.232.34.70:443
47.22.148.6:443
93.8.66.216:443
124.123.42.115:2222
217.17.56.163:2222
217.17.56.163:2078
217.17.56.163:465
41.228.22.180:443
76.25.142.196:443
71.74.12.34:443
71.80.168.245:443
75.188.35.168:443
173.21.10.71:2222
73.151.236.31:443
45.46.53.140:2222
67.165.206.193:993
38.10.201.211:443
72.252.201.69:443
71.60.246.5:443
92.148.59.207:2222
92.157.171.41:2222
24.139.72.117:443
186.18.205.199:995
24.229.150.54:995
47.40.196.233:2222
24.55.112.61:443
177.130.82.197:2222
109.12.111.14:443
68.204.7.158:443
186.87.135.68:995
80.6.192.58:443
103.148.120.144:443
75.66.88.33:443
173.25.166.81:443
187.156.138.172:443
82.77.137.101:995
173.234.155.233:443
2.178.108.147:61202
73.77.87.137:443
182.176.112.182:443
96.37.113.36:993
162.244.227.34:443
92.59.35.196:2222
196.218.227.241:995
68.207.102.78:443
2.188.27.77:443
189.210.115.207:443
181.163.96.53:443
75.107.26.196:465
185.250.148.74:2222
68.186.192.69:443
-
salt
jHxastDcds)oMc=jvh7wdUhxcsdt2
Targets
-
-
Target
14bcfaa8f83de0d941d512f53c257103_JaffaCakes118
-
Size
708KB
-
MD5
14bcfaa8f83de0d941d512f53c257103
-
SHA1
a1f38d75b7c8c0add0a4fc76fc2fbde08f5acdd8
-
SHA256
f8e65caf7f0e6996f5a956af9d4258273fe30185aa2b06d74b2fdd7ba33f1f85
-
SHA512
634516818f31c58342d3283faec4b611a334fce9013be9611b70aac289de0a5115a3f8dc688b3f1ad07c7d64a47565aa399d2259ed4285cd43568712111b7705
-
SSDEEP
12288:DsbAcis08s7gQFMWC24/MFS+AWmdXWJIjJ5F3+DpEFs3H6v/+xoTNp:DODis0dFA24/MFSptoJKnx+NE23a3+x4
-
Loads dropped DLL
-