General

  • Target

    27051275caf38adcf7677e7a955adfea_JaffaCakes118

  • Size

    573KB

  • Sample

    241008-3e7esssdka

  • MD5

    27051275caf38adcf7677e7a955adfea

  • SHA1

    cd2e048cec404185cdaeec25eb8f4a1879a4bfd0

  • SHA256

    c415b005c35c6e337240e2e8fd6cbead3cc4d5d21be5b793175b75aae4b93536

  • SHA512

    128d5f42d02711b84e3c5dee045495cf89c6cdec9a68644110fdb7556b60fc61d5c56f17c1c5956f0dc61bb34c444348c04c739bdc04ac9079829b2f0d1a74ce

  • SSDEEP

    12288:R87H3sH2k/eJ9A9tqKsuud0Xl0pT7fEztxG9HBMbVNAbirS:RSs7/KYtqoE3MzO9HoHAs

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

obama107

Campaign

1633078880

C2

140.82.49.12:443

41.250.143.109:995

216.201.162.158:443

86.8.177.143:443

105.198.236.99:443

124.123.42.115:2222

217.17.56.163:443

37.210.152.224:995

190.198.206.189:2222

75.89.195.186:995

78.191.44.76:995

122.11.220.212:2222

68.186.192.69:443

159.2.51.200:2222

217.17.56.163:2222

217.17.56.163:2078

41.228.22.180:443

120.151.47.189:443

47.22.148.6:443

94.200.181.154:443

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      27051275caf38adcf7677e7a955adfea_JaffaCakes118

    • Size

      573KB

    • MD5

      27051275caf38adcf7677e7a955adfea

    • SHA1

      cd2e048cec404185cdaeec25eb8f4a1879a4bfd0

    • SHA256

      c415b005c35c6e337240e2e8fd6cbead3cc4d5d21be5b793175b75aae4b93536

    • SHA512

      128d5f42d02711b84e3c5dee045495cf89c6cdec9a68644110fdb7556b60fc61d5c56f17c1c5956f0dc61bb34c444348c04c739bdc04ac9079829b2f0d1a74ce

    • SSDEEP

      12288:R87H3sH2k/eJ9A9tqKsuud0Xl0pT7fEztxG9HBMbVNAbirS:RSs7/KYtqoE3MzO9HoHAs

MITRE ATT&CK Enterprise v15

Tasks