General

  • Target

    acaf0b60acb73370b7ebf96ecbfd947da545dda84413333ca918cb46cca87f7e.dll

  • Size

    255KB

  • Sample

    201125-a2cjkw8vbj

  • MD5

    056ae65f93e17decca62525ac9067970

  • SHA1

    fbefcf270c61e7108d1e5b6124d299c741ea6acf

  • SHA256

    acaf0b60acb73370b7ebf96ecbfd947da545dda84413333ca918cb46cca87f7e

  • SHA512

    73f58f97d3563bd3775884ae88c00254f469ce49177a32866d3f341ed2857ba55bd2aba4d4f816c7fa5c2000833a1b11340f25cc77a305b9f8cf4257a105f7a1

Malware Config

Extracted

Family

qakbot

Botnet

abc101

Campaign

1606294013

C2

98.115.243.237:443

78.101.21.73:443

185.163.221.77:2222

2.51.246.190:995

2.50.2.11:995

175.137.79.81:443

42.201.228.106:995

185.246.9.69:995

81.133.234.36:2222

24.205.42.241:443

73.239.229.107:995

102.185.58.126:443

173.245.152.231:443

105.101.216.210:443

89.137.195.167:995

174.76.21.134:443

41.238.217.126:6881

47.138.204.19:443

79.166.83.103:2222

92.154.83.96:1194

Targets

    • Target

      acaf0b60acb73370b7ebf96ecbfd947da545dda84413333ca918cb46cca87f7e.dll

    • Size

      255KB

    • MD5

      056ae65f93e17decca62525ac9067970

    • SHA1

      fbefcf270c61e7108d1e5b6124d299c741ea6acf

    • SHA256

      acaf0b60acb73370b7ebf96ecbfd947da545dda84413333ca918cb46cca87f7e

    • SHA512

      73f58f97d3563bd3775884ae88c00254f469ce49177a32866d3f341ed2857ba55bd2aba4d4f816c7fa5c2000833a1b11340f25cc77a305b9f8cf4257a105f7a1

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Tasks