Overview

overview

10

Static

static

3

JaffaCakes...f7.dll

windows7-x64

10

JaffaCakes...f7.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_3611d2ca5d36001273805e081c8ab5f7

  • Size

    572KB

  • Sample

    250106-x45plsxldq

  • MD5

    3611d2ca5d36001273805e081c8ab5f7

  • SHA1

    e96058101f0ff1dc1dac0bc8b04045a0fa8f13d2

  • SHA256

    f6e3631fe9c31a84fb87fb401ede1f154d8aae3374e212e6b32465f371ba1cd8

  • SHA512

    9add14f71b69226a453d2ed4c2abd3d060eb7ef0346f2ca47d5f3f51c74c1c86a6a4f2fb9fe63b783057082c11230635a9a6ce01392370d6b6b49c5d2867fab8

  • SSDEEP

    6144:VJVAfqX+2Rr+nxQDBO03fHEera3bpt5eH3:VvAfLfaEkAz5U

Score
10/10
qakbotobama1141634112211bankerdiscoveryevasionstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

obama114

Campaign

1634112211

C2

111.125.245.116:443

124.123.42.115:2222

103.250.38.115:443

68.117.229.117:443

189.252.166.130:32101

89.137.52.44:443

208.78.220.143:443

77.31.162.93:443

83.110.201.195:443

94.200.181.154:443

103.82.211.39:995

216.201.162.158:443

78.179.137.102:995

24.231.209.2:2222

63.143.92.99:995

140.82.49.12:443

73.230.205.91:443

41.86.42.158:995

220.255.25.28:2222

200.232.214.222:995
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      JaffaCakes118_3611d2ca5d36001273805e081c8ab5f7

    • Size

      572KB

    • MD5

      3611d2ca5d36001273805e081c8ab5f7

    • SHA1

      e96058101f0ff1dc1dac0bc8b04045a0fa8f13d2

    • SHA256

      f6e3631fe9c31a84fb87fb401ede1f154d8aae3374e212e6b32465f371ba1cd8

    • SHA512

      9add14f71b69226a453d2ed4c2abd3d060eb7ef0346f2ca47d5f3f51c74c1c86a6a4f2fb9fe63b783057082c11230635a9a6ce01392370d6b6b49c5d2867fab8

    • SSDEEP

      6144:VJVAfqX+2Rr+nxQDBO03fHEera3bpt5eH3:VvAfLfaEkAz5U

    Score
    10/10
    qakbotobama1141634112211bankerdiscoveryevasionstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks