Overview

overview

10

Static

static

3

JaffaCakes...a8.dll

windows10-2004-x64

10

JaffaCakes...a8.dll

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    JaffaCakes118_3ef9c3be91a0687286442fd922b4c0a8
  • Size 484KB
  • Sample260103-kgdldsbv4f
  • SHA256 3def8c370696f8bb238de8434680c984115d2285e76296dc0190043148ad7a5c
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
qakbotobama1031632477754bankerdefense_evasiondiscoveryexecutionpersistencestealertrojan

Malware Config

Extracted

Family

  • qakbot

Version

  • 402.343

Botnet

  • obama103

Campaign

  • 1632477754

C2

  • 136.232.34.70:443

  • 216.201.162.158:443

  • 92.59.35.196:2222

  • 105.198.236.99:443

  • 185.250.148.74:443

  • 73.77.87.137:443

  • 196.218.227.241:995

  • 103.148.120.144:443

  • 120.150.218.241:995

  • 47.22.148.6:443

  • 140.82.49.12:443

  • 71.74.12.34:443

  • 27.223.92.142:995

  • 76.25.142.196:443

  • 95.77.223.148:443

  • 75.188.35.168:443

  • 96.37.113.36:993

  • 173.21.10.71:2222

  • 45.46.53.140:2222

  • 73.151.236.31:443

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

MITRE ATT&CK Enterprise v16

Tasks