Overview

overview

10

Static

static

3

JaffaCakes...5c.dll

windows7-x64

10

JaffaCakes...5c.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_9d0548b0495518b448154aee4726aa5c

  • Size

    890KB

  • Sample

    250108-nk371axrds

  • MD5

    9d0548b0495518b448154aee4726aa5c

  • SHA1

    839cecb1e45d0dd5af4397754ee3564f0848eb1b

  • SHA256

    9fd2f36653216c8e653de84e5f247e3c9c379fc98f2644fd20ccde41bba501bf

  • SHA512

    9ca2401fb0b821969540c2e2e32d9625c2400d504bf23399a94c6335ca5c24bfa333610e9b70899e7236a040d301f0b95baeffe234925c5de5ca749c0a059019

  • SSDEEP

    24576:mvmCkM3miQH9ZfSCFEzIuViMKvb/o2ggJcWMeQRqg:mvm+3m1jSCFoKvjjXJcl9qg

Score
10/10
qakbotbiden541634810637bankerdiscoveryevasionstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

biden54

Campaign

1634810637

C2

136.143.11.232:443

63.143.92.99:995

182.176.180.73:443

136.232.34.70:443

123.252.190.14:443

216.201.162.158:443

37.208.181.198:61200

140.82.49.12:443

197.89.144.102:443

89.137.52.44:443

109.12.111.14:443

78.191.24.189:995

105.198.236.99:995

196.207.140.40:995

41.235.69.115:443

2.222.167.138:443

117.198.156.56:443

24.231.209.2:6881

27.223.92.142:995

96.246.158.154:995
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      JaffaCakes118_9d0548b0495518b448154aee4726aa5c

    • Size

      890KB

    • MD5

      9d0548b0495518b448154aee4726aa5c

    • SHA1

      839cecb1e45d0dd5af4397754ee3564f0848eb1b

    • SHA256

      9fd2f36653216c8e653de84e5f247e3c9c379fc98f2644fd20ccde41bba501bf

    • SHA512

      9ca2401fb0b821969540c2e2e32d9625c2400d504bf23399a94c6335ca5c24bfa333610e9b70899e7236a040d301f0b95baeffe234925c5de5ca749c0a059019

    • SSDEEP

      24576:mvmCkM3miQH9ZfSCFEzIuViMKvb/o2ggJcWMeQRqg:mvm+3m1jSCFoKvjjXJcl9qg

    Score
    10/10
    qakbotbiden541634810637bankerdiscoveryevasionstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks