General

  • Target
    aAWgu.tmp
  • Size 552KB
  • Sample210122-m7jxt9a8gs
  • SHA256 8448b35129ef8e0cf4fb2df2897bb0dd397509f18a894360825f0318af446e80
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • qakbot

Botnet
  • krk01

Campaign
  • 1611226305

C2
  • 193.248.221.184:2222

  • 69.123.179.70:443

  • 197.45.110.165:995

  • 85.132.36.111:2222

  • 88.233.91.244:443

  • 149.28.98.196:2222

  • 207.246.116.237:995

  • 45.32.211.207:995

  • 149.28.101.90:995

  • 207.246.116.237:2222

  • 144.202.38.185:443

  • 149.28.101.90:8443

  • 45.32.211.207:8443

  • 149.28.101.90:2222

  • 207.246.77.75:443

  • 207.246.116.237:443

  • 45.63.107.192:2222

  • 207.246.77.75:8443

  • 207.246.77.75:2222

  • 149.28.99.97:995

Targets

    • Target
      aAWgu.tmp
    • Size 552KB
    • SHA256 8448b35129ef8e0cf4fb2df2897bb0dd397509f18a894360825f0318af446e80
    • MD5 SHA1 SHA512

MITRE ATT&CK Enterprise v6

Tasks