Overview

overview

10

Static

static

3

JaffaCakes...63.dll

windows10-2004-x64

10

JaffaCakes...63.dll

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    JaffaCakes118_3b301661722484f1bdd88335f7970563
  • Size 484KB
  • Sample251218-26rb8atkdn
  • SHA256 b4d60f3367385bdaf777c59b5782877aae8dfa917efedfe002b5ec92afd00c3e
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
qakbotobama1031632477754bankerdefense_evasiondiscoveryexecutionpersistencestealertrojan

Malware Config

Extracted

Family

  • qakbot

Version

  • 402.343

Botnet

  • obama103

Campaign

  • 1632477754

C2

  • 136.232.34.70:443

  • 216.201.162.158:443

  • 92.59.35.196:2222

  • 105.198.236.99:443

  • 185.250.148.74:443

  • 73.77.87.137:443

  • 196.218.227.241:995

  • 103.148.120.144:443

  • 120.150.218.241:995

  • 47.22.148.6:443

  • 140.82.49.12:443

  • 71.74.12.34:443

  • 27.223.92.142:995

  • 76.25.142.196:443

  • 95.77.223.148:443

  • 75.188.35.168:443

  • 96.37.113.36:993

  • 173.21.10.71:2222

  • 45.46.53.140:2222

  • 73.151.236.31:443

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

MITRE ATT&CK Enterprise v16

Tasks