General

  • Target

    55555555555.dll

  • Size

    2.4MB

  • Sample

    201223-q6elh3fl1s

  • MD5

    bcf68d93a541a91987edc25f21013188

  • SHA1

    b096b6759d4193b28bd6f1752d993ac968f7ff12

  • SHA256

    74f858ddf69b8cdc11296a080f96f2f8f1a04832daed407076bf67e7ffb7d191

  • SHA512

    d1451aff3bb34e72c8717efcc40dd43dfbb08aebfa75c82d96db0a992acb55985e26e6b96119600fb816b7bdb660ae4da68334d264bbf113a6b5763a8913c0a4

Malware Config

Extracted

Family

qakbot

Botnet

abc117

Campaign

1608719407

C2

41.39.134.183:443

113.193.187.2:995

90.188.91.57:995

176.181.247.197:443

78.191.87.198:20

83.110.241.182:443

93.149.167.254:2222

76.111.128.194:443

32.212.117.188:443

72.36.59.46:2222

68.186.192.69:443

94.98.248.152:443

105.226.38.36:443

92.154.83.96:2222

37.210.255.225:995

74.195.52.3:443

73.166.10.38:443

95.77.223.148:443

80.227.5.70:443

91.104.104.63:995

Targets

    • Target

      55555555555.dll

    • Size

      2.4MB

    • MD5

      bcf68d93a541a91987edc25f21013188

    • SHA1

      b096b6759d4193b28bd6f1752d993ac968f7ff12

    • SHA256

      74f858ddf69b8cdc11296a080f96f2f8f1a04832daed407076bf67e7ffb7d191

    • SHA512

      d1451aff3bb34e72c8717efcc40dd43dfbb08aebfa75c82d96db0a992acb55985e26e6b96119600fb816b7bdb660ae4da68334d264bbf113a6b5763a8913c0a4

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Tasks