General

  • Target
    1412.exe
  • Size 2.2MB
  • Sample201215-s19s4ct94j
  • SHA256 4f1fa4e10f6e48c0a9a818f06f09955f2aeec7fe8b25708d5f5b0d1b8e8ec63c
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • qakbot

Botnet
  • tr02

Campaign
  • 1608026105

C2
  • 111.95.212.237:2222

  • 190.220.8.10:995

  • 109.154.79.222:2222

  • 83.110.250.71:995

  • 149.28.99.97:2222

  • 45.63.107.192:443

  • 149.28.101.90:2222

  • 149.28.101.90:995

  • 149.28.99.97:443

  • 149.28.98.196:443

  • 144.202.38.185:2222

  • 45.77.115.208:995

  • 149.28.98.196:2222

  • 149.28.98.196:995

  • 149.28.99.97:995

  • 45.63.107.192:2222

  • 144.202.38.185:995

  • 144.202.38.185:443

  • 45.63.107.192:995

  • 5.13.84.186:995

Targets

    • Target
      1412.exe
    • Size 2.2MB
    • SHA256 4f1fa4e10f6e48c0a9a818f06f09955f2aeec7fe8b25708d5f5b0d1b8e8ec63c
    • MD5 SHA1 SHA512

MITRE ATT&CK Enterprise v6

Tasks