Overview

overview

10

Static

static

3

JaffaCakes...d3.dll

windows7-x64

10

JaffaCakes...d3.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_2e7546c1ed16e6ca256c9b20c07ddcd3

  • Size

    890KB

  • Sample

    250106-t3ng6atlhm

  • MD5

    2e7546c1ed16e6ca256c9b20c07ddcd3

  • SHA1

    11f597381fad059b8802af99bbc170c27a976a3a

  • SHA256

    800b4347ed6b61a032693968743c4338c01e8ecc363843d4c50487fe3867bbd8

  • SHA512

    3292f89e4ff952a72695870f8813cc01e40e550080cbce8ae9c36aae00aff797064d11872c05b6c84093cf6b2150827761317f8d3cc1dca3f671c00b2c483cd4

  • SSDEEP

    24576:mvmCkM3miQH9ZfSCFEzIuViMKvb/o2ggJcWMeQRqgc:mvm+3m1jSCFoKvjjXJcl9qgc

Score
10/10
qakbotbiden541634810637bankerdiscoveryevasionstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

biden54

Campaign

1634810637

C2

136.143.11.232:443

63.143.92.99:995

182.176.180.73:443

136.232.34.70:443

123.252.190.14:443

216.201.162.158:443

37.208.181.198:61200

140.82.49.12:443

197.89.144.102:443

89.137.52.44:443

109.12.111.14:443

78.191.24.189:995

105.198.236.99:995

196.207.140.40:995

41.235.69.115:443

2.222.167.138:443

117.198.156.56:443

24.231.209.2:6881

27.223.92.142:995

96.246.158.154:995
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      JaffaCakes118_2e7546c1ed16e6ca256c9b20c07ddcd3

    • Size

      890KB

    • MD5

      2e7546c1ed16e6ca256c9b20c07ddcd3

    • SHA1

      11f597381fad059b8802af99bbc170c27a976a3a

    • SHA256

      800b4347ed6b61a032693968743c4338c01e8ecc363843d4c50487fe3867bbd8

    • SHA512

      3292f89e4ff952a72695870f8813cc01e40e550080cbce8ae9c36aae00aff797064d11872c05b6c84093cf6b2150827761317f8d3cc1dca3f671c00b2c483cd4

    • SSDEEP

      24576:mvmCkM3miQH9ZfSCFEzIuViMKvb/o2ggJcWMeQRqgc:mvm+3m1jSCFoKvjjXJcl9qgc

    Score
    10/10
    qakbotbiden541634810637bankerdiscoveryevasionstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks