Overview

overview

10

Static

static

3

3d2eb53616...18.dll

windows7-x64

10

3d2eb53616...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    3d2eb53616b824bd6c7633ba3b9e8dfa_JaffaCakes118
  • Size 708KB
  • Sample241013-cdfmkstcma
  • SHA256 ab632f1bb9aac5d829ff542bcc95956ad53b85fbb30f3bf36b4e566861d37f61
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
qakbotobama1061632905607bankerdiscoveryevasionstealertrojan

Malware Config

Extracted

Family

  • qakbot

Version

  • 402.363

Botnet

  • obama106

Campaign

  • 1632905607

C2

  • 37.210.152.224:995

  • 120.151.47.189:443

  • 105.198.236.99:443

  • 122.11.220.212:2222

  • 199.27.127.129:443

  • 41.251.41.14:995

  • 216.201.162.158:443

  • 124.123.42.115:2078

  • 181.118.183.94:443

  • 120.150.218.241:995

  • 185.250.148.74:443

  • 217.17.56.163:443

  • 182.181.78.18:995

  • 140.82.49.12:443

  • 105.159.144.186:995

  • 89.101.97.139:443

  • 217.17.56.163:0

  • 27.223.92.142:995

  • 95.77.223.148:443

  • 109.190.253.11:2222

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target
      3d2eb53616b824bd6c7633ba3b9e8dfa_JaffaCakes118
    • Size 708KB
    • SHA256 ab632f1bb9aac5d829ff542bcc95956ad53b85fbb30f3bf36b4e566861d37f61
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    qakbotobama1061632905607bankerdiscoveryevasionstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks