Overview

overview

10

Static

static

3

JaffaCakes...57.dll

windows7-x64

10

JaffaCakes...57.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_22494afa40eaebc1ea5f5dd43b002f57

  • Size

    890KB

  • Sample

    250106-n4b8mayjcm

  • MD5

    22494afa40eaebc1ea5f5dd43b002f57

  • SHA1

    5e7b896b4783ee0a47abe87a35b8e7eca16bbfb0

  • SHA256

    00b68130e0d36a88bd8a0bbef9eeadd38f9aee208c55095ddce76452c5d6d46e

  • SHA512

    cffd89833b5d8ec022b11bbd6750be3ebc87b62c3b48889e146be451a26661dd2c91b91c92752c2af7e2b9d98e257a4f55a82119c5e8eef6129a68f86bf2a23d

  • SSDEEP

    24576:AvmCkD3miQH9ZfSCFEzIuViMKvb/o2ggJcWweQRqg:Avml3m1jSCFoKvjjXJcZ9qg

Score
10/10
qakbotbiden541634810637bankerdiscoveryevasionstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

biden54

Campaign

1634810637

C2

136.143.11.232:443

63.143.92.99:995

182.176.180.73:443

136.232.34.70:443

123.252.190.14:443

216.201.162.158:443

37.208.181.198:61200

140.82.49.12:443

197.89.144.102:443

89.137.52.44:443

109.12.111.14:443

78.191.24.189:995

105.198.236.99:995

196.207.140.40:995

41.235.69.115:443

2.222.167.138:443

117.198.156.56:443

24.231.209.2:6881

27.223.92.142:995

96.246.158.154:995
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      JaffaCakes118_22494afa40eaebc1ea5f5dd43b002f57

    • Size

      890KB

    • MD5

      22494afa40eaebc1ea5f5dd43b002f57

    • SHA1

      5e7b896b4783ee0a47abe87a35b8e7eca16bbfb0

    • SHA256

      00b68130e0d36a88bd8a0bbef9eeadd38f9aee208c55095ddce76452c5d6d46e

    • SHA512

      cffd89833b5d8ec022b11bbd6750be3ebc87b62c3b48889e146be451a26661dd2c91b91c92752c2af7e2b9d98e257a4f55a82119c5e8eef6129a68f86bf2a23d

    • SSDEEP

      24576:AvmCkD3miQH9ZfSCFEzIuViMKvb/o2ggJcWweQRqg:Avml3m1jSCFoKvjjXJcZ9qg

    Score
    10/10
    qakbotbiden541634810637bankerdiscoveryevasionstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks