b5b4.exe

General
Target

b5b4.exe

Size

684KB

Sample

191216-2se5jb3s4x

Score
10 /10
MD5

d2399ff437e5106ea2af89a0125c6866

SHA1

07977968e44bf117673443a6ebfaa5f69929a6df

SHA256

b5b4b488a0a8f8ad6c5a738c2bc7dcbd7c198005d6adf2297b6f482b748440f6

SHA512

f72eb5ecf5c7579351772c1105ffb276e7896b763b8fe3b06a0df80d891cc3b6b107646aebcb64cd758a2dd1b049afd0b6f06059291a6ecf69899205f7f90442

Malware Config

Extracted

Family qakbot
Campaign 1576221125
C2

72.187.35.131:443

188.61.134.98:2222

47.153.115.154:995

75.130.117.134:443

174.131.181.120:995

24.32.119.146:443

184.101.230.153:443

70.124.29.226:443

47.227.198.155:443

12.176.32.146:443

172.89.144.89:995

66.214.75.176:443

99.228.5.106:443

98.237.120.65:995

206.51.202.106:50002

50.247.230.33:995

96.37.137.42:443

73.226.220.56:443

70.164.39.91:443

104.152.16.45:995

24.184.6.58:2222

201.152.199.156:995

72.183.255.148:443

5.182.39.156:443

72.16.212.107:465

162.244.224.166:443

63.230.17.215:995

75.131.72.82:995

67.10.18.112:993

75.131.72.82:443

196.194.66.31:2222

197.82.208.68:995

181.126.80.118:443

67.214.21.207:443

32.208.1.239:8443

72.47.115.182:443

47.40.244.237:443

173.31.178.20:443

2.187.66.157:995

66.169.209.201:443

181.197.195.138:995

201.188.10.16:443

67.246.180.90:443

74.134.35.54:443

70.174.21.130:443

207.178.109.161:443

75.182.214.87:443

24.189.222.222:2222

104.34.186.27:995

23.240.185.215:443

Targets
Target

b5b4.exe

MD5

d2399ff437e5106ea2af89a0125c6866

Filesize

684KB

Score
10 /10
SHA1

07977968e44bf117673443a6ebfaa5f69929a6df

SHA256

b5b4b488a0a8f8ad6c5a738c2bc7dcbd7c198005d6adf2297b6f482b748440f6

SHA512

f72eb5ecf5c7579351772c1105ffb276e7896b763b8fe3b06a0df80d891cc3b6b107646aebcb64cd758a2dd1b049afd0b6f06059291a6ecf69899205f7f90442

Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Execution
          Exfiltration
            Impact
              Initial Access
                Lateral Movement
                  Privilege Escalation