General

  • Target

    3b77a6233b9698e0df38e1f838c7264a0df0c27a873fb9b65f05d9dc45e193e2

  • Size

    714KB

  • Sample

    210207-ca34t844kj

  • MD5

    26b59ebcad88f786cea9f2d8d99993b6

  • SHA1

    466edac07611d4cc86da910095eae27837e61368

  • SHA256

    3b77a6233b9698e0df38e1f838c7264a0df0c27a873fb9b65f05d9dc45e193e2

  • SHA512

    a4419f939b519177933a7b3cb8d2ea309644c6eab14e3fe55ced26503556d755aa990b1a791cb7a9cc3c639d9f691a33a0f305bc8d3aa2e40797ab6f5dba21cf

Malware Config

Extracted

Family

qakbot

Botnet

abc123

Campaign

1612349986

C2

222.154.253.111:995

50.244.112.106:443

83.110.108.181:2222

105.198.236.99:443

74.77.162.33:443

106.250.150.98:443

196.151.252.84:443

45.118.216.157:443

140.82.49.12:443

80.11.173.82:8443

71.88.193.17:443

68.186.192.69:443

46.153.119.255:995

81.214.126.173:2222

108.31.15.10:995

197.45.110.165:995

81.88.254.62:443

86.97.8.249:443

202.187.58.21:443

41.39.134.183:443

Targets

    • Target

      3b77a6233b9698e0df38e1f838c7264a0df0c27a873fb9b65f05d9dc45e193e2

    • Size

      714KB

    • MD5

      26b59ebcad88f786cea9f2d8d99993b6

    • SHA1

      466edac07611d4cc86da910095eae27837e61368

    • SHA256

      3b77a6233b9698e0df38e1f838c7264a0df0c27a873fb9b65f05d9dc45e193e2

    • SHA512

      a4419f939b519177933a7b3cb8d2ea309644c6eab14e3fe55ced26503556d755aa990b1a791cb7a9cc3c639d9f691a33a0f305bc8d3aa2e40797ab6f5dba21cf

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Tasks