General

  • Target
    27051275caf38adcf7677e7a955adfea_JaffaCakes118
  • Size 573KB
  • Sample241008-3e7esssdka
  • SHA256 c415b005c35c6e337240e2e8fd6cbead3cc4d5d21be5b793175b75aae4b93536
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • qakbot

Version
  • 402.363

Botnet
  • obama107

Campaign
  • 1633078880

C2
  • 140.82.49.12:443

  • 41.250.143.109:995

  • 216.201.162.158:443

  • 86.8.177.143:443

  • 105.198.236.99:443

  • 124.123.42.115:2222

  • 217.17.56.163:443

  • 37.210.152.224:995

  • 190.198.206.189:2222

  • 75.89.195.186:995

  • 78.191.44.76:995

  • 122.11.220.212:2222

  • 68.186.192.69:443

  • 159.2.51.200:2222

  • 217.17.56.163:2222

  • 217.17.56.163:2078

  • 41.228.22.180:443

  • 120.151.47.189:443

  • 47.22.148.6:443

  • 94.200.181.154:443

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target
      27051275caf38adcf7677e7a955adfea_JaffaCakes118
    • Size 573KB
    • SHA256 c415b005c35c6e337240e2e8fd6cbead3cc4d5d21be5b793175b75aae4b93536
    • MD5 SHA1 SHA512 SSDEEP

MITRE ATT&CK Enterprise v15

Tasks