General

  • Target

    9237532

  • Size

    2.9MB

  • Sample

    201128-axp625pryj

  • MD5

    a4fbcb9da63aa7373ecbf92a12417fb9

  • SHA1

    ad1413785ed81657badbedbda6ea3a7568b41c56

  • SHA256

    772083448e670c843097a0a3d05a436539152bcb5a78f569932ca525c43f21f7

  • SHA512

    89a0144fd76a91641d755d755b46a9694563d6dc2e9b042cd4073acd4f830c2cb98d2959c284193d5f9c3c8bd173d6beee55f266d21e0754bcd3944e59b61c9b

Malware Config

Extracted

Family

qakbot

Botnet

abc101

Campaign

1606331967

C2

76.104.230.174:443

187.227.86.129:995

219.255.28.241:443

78.184.6.94:443

95.159.45.82:443

91.228.36.95:443

79.115.215.125:443

24.244.161.36:443

24.71.28.247:443

73.239.229.107:995

187.153.119.36:443

190.75.167.44:2222

83.110.111.159:443

174.76.21.134:443

75.109.180.221:443

85.122.141.42:995

156.222.6.246:995

188.24.183.193:443

88.106.237.152:2222

79.166.83.103:2222

Targets

    • Target

      9237532

    • Size

      2.9MB

    • MD5

      a4fbcb9da63aa7373ecbf92a12417fb9

    • SHA1

      ad1413785ed81657badbedbda6ea3a7568b41c56

    • SHA256

      772083448e670c843097a0a3d05a436539152bcb5a78f569932ca525c43f21f7

    • SHA512

      89a0144fd76a91641d755d755b46a9694563d6dc2e9b042cd4073acd4f830c2cb98d2959c284193d5f9c3c8bd173d6beee55f266d21e0754bcd3944e59b61c9b

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Tasks