General

  • Target
    gobbledygook.dat.dll
  • Size 627KB
  • Sample221027-lnrl9sbgem
  • SHA256 45f0b7dbf4fc33f560b353591c93af28472c6691f8f9f93eb01749bc0876350b
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • qakbot

Version
  • 403.1051

Botnet
  • BB04

Campaign
  • 1666776497

C2
  • 197.204.53.242:443

  • 83.244.63.21:443

  • 27.110.134.202:995

  • 173.49.74.62:443

  • 181.164.194.228:443

  • 24.116.45.121:443

  • 41.47.249.185:443

  • 24.206.27.39:443

  • 113.183.223.8:443

  • 186.188.80.134:443

  • 64.207.237.118:443

  • 156.216.134.70:995

  • 58.247.115.126:995

  • 180.151.116.67:443

  • 41.140.63.187:443

  • 144.202.15.58:443

  • 190.199.97.108:993

  • 172.117.139.142:995

  • 45.230.169.132:995

  • 24.9.220.167:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target
      gobbledygook.dat.dll
    • Size 627KB
    • SHA256 45f0b7dbf4fc33f560b353591c93af28472c6691f8f9f93eb01749bc0876350b
    • MD5 SHA1 SHA512 SSDEEP

MITRE ATT&CK Matrix

Tasks