Overview

overview

10

Static

static

3

JaffaCakes...77.dll

windows7-x64

10

JaffaCakes...77.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_9bbec8ddcd9e62a0ddbc7d69e0677c77

  • Size

    1.6MB

  • Sample

    250108-myyzrswrgt

  • MD5

    9bbec8ddcd9e62a0ddbc7d69e0677c77

  • SHA1

    7a59d1f69d9b3d11aaaba18aa62ac18eabb7e873

  • SHA256

    4fcaca0a4c0b4e25ba9b1371772d6400b25182aa9e21a9a13b5ad342edc2ed56

  • SHA512

    9778e1d7b6a981d210910ef0525664506e9f5d3bf113489903413f2a7e781430e6e66e8a5c0156ad9e1673966f0e437ada9249a7cef643a7b8d3c27fa75fcab2

  • SSDEEP

    24576:F9mB+XxJ7zUqNS8KqCx2ffNrC0O60+bPzTk1wK7TpKsZ:FUBav7zbS8pCx2fftCv6JLwJ7FKsZ

Score
10/10
qakbottr1634541613bankerdiscoveryevasionstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

tr

Campaign

1634541613

C2

120.150.218.241:995

24.119.214.7:443

103.143.8.71:443

81.241.252.59:2078

81.250.153.227:2222

174.54.193.186:443

73.52.50.32:443

39.49.122.240:995

86.220.112.26:2222

103.82.211.39:465

78.191.38.33:995

216.201.162.158:443

181.118.183.94:443

66.177.215.152:0

208.78.220.143:443

94.200.181.154:443

136.232.34.70:443

136.143.11.232:443

81.213.59.22:443

103.82.211.39:990
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      JaffaCakes118_9bbec8ddcd9e62a0ddbc7d69e0677c77

    • Size

      1.6MB

    • MD5

      9bbec8ddcd9e62a0ddbc7d69e0677c77

    • SHA1

      7a59d1f69d9b3d11aaaba18aa62ac18eabb7e873

    • SHA256

      4fcaca0a4c0b4e25ba9b1371772d6400b25182aa9e21a9a13b5ad342edc2ed56

    • SHA512

      9778e1d7b6a981d210910ef0525664506e9f5d3bf113489903413f2a7e781430e6e66e8a5c0156ad9e1673966f0e437ada9249a7cef643a7b8d3c27fa75fcab2

    • SSDEEP

      24576:F9mB+XxJ7zUqNS8KqCx2ffNrC0O60+bPzTk1wK7TpKsZ:FUBav7zbS8pCx2fftCv6JLwJ7FKsZ

    Score
    10/10
    qakbottr1634541613bankerdiscoveryevasionstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks