1myPtKM47.exe

General
Target

1myPtKM47.exe

Size

843KB

Sample

200110-1r4anj6et2

Score
10 /10
MD5

8d5f0f08155f786c4497f40d2340074a

SHA1

14840d453853952849132892d00bbe0a6519662e

SHA256

4d92741dad73892e574cb0b783929d1b7ffe61eae0ee62cd37f96d96675ced81

SHA512

55f73fb41d3322f1b9f33f0fbff26e54a5c1d62f8024ebd53a71e1c414d21e67a4a6f31323e13a2892b2b0d6285e90e4d7fcf3af9f23458805ee72d0bee3f4f1

Malware Config

Extracted

Family qakbot
Campaign 1578386545
C2

72.218.167.183:443

74.33.69.22:443

181.197.195.138:995

47.23.101.26:465

74.194.117.185:443

66.214.75.176:443

45.45.105.94:995

71.30.56.170:443

50.247.230.33:995

67.10.18.112:993

72.224.159.224:2222

173.3.132.17:995

173.79.220.156:443

75.165.181.122:443

70.62.160.186:6883

130.93.11.211:443

104.191.66.184:443

73.142.81.221:443

184.191.62.78:443

47.153.115.154:443

98.252.150.180:443

188.61.134.98:2222

45.45.105.94:443

24.229.245.124:995

76.180.69.236:443

138.122.5.214:443

206.51.202.106:50002

67.233.124.33:995

71.77.231.251:443

59.93.193.101:995

24.32.119.146:443

96.35.170.82:2222

12.5.37.3:443

207.178.109.161:443

72.16.212.107:465

75.131.72.82:443

68.174.15.223:443

172.242.9.118:995

12.5.37.3:995

5.182.39.156:443

24.27.82.216:2222

71.29.187.201:22

162.244.225.30:443

108.227.161.27:443

67.200.146.98:2222

104.235.95.38:443

72.187.35.131:443

104.3.91.20:995

68.49.120.179:443

24.191.227.91:2222

Targets
Target

1myPtKM47.exe

MD5

8d5f0f08155f786c4497f40d2340074a

Filesize

843KB

Score
10 /10
SHA1

14840d453853952849132892d00bbe0a6519662e

SHA256

4d92741dad73892e574cb0b783929d1b7ffe61eae0ee62cd37f96d96675ced81

SHA512

55f73fb41d3322f1b9f33f0fbff26e54a5c1d62f8024ebd53a71e1c414d21e67a4a6f31323e13a2892b2b0d6285e90e4d7fcf3af9f23458805ee72d0bee3f4f1

Tags

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Execution
          Exfiltration
            Impact
              Initial Access
                Lateral Movement
                  Privilege Escalation