General

  • Target

    b5289434ddef2a2632677a29cae2b3f9eae823198b48222f636de5a751d7f4ad

  • Size

    1.2MB

  • Sample

    210325-3x9kysl546

  • MD5

    11f4a2a21dd134e6f8c909d3d8609e7b

  • SHA1

    a41e72ba8af4036c703a1da90dfd4be429c7c3b6

  • SHA256

    b5289434ddef2a2632677a29cae2b3f9eae823198b48222f636de5a751d7f4ad

  • SHA512

    acd645237976acb56f97c43e0669cebb5f7200df2b76ebdb242b7ab2e381404daa45716351a7668f4eb771b1c491dff4cd58ccc531bf55cb8f2d26e184f179ea

Malware Config

Extracted

Family

qakbot

Botnet

biden12

Campaign

1615580905

C2

24.229.150.54:995

109.12.111.14:443

173.21.10.71:2222

81.214.126.173:2222

75.118.1.141:443

98.252.118.134:443

71.74.12.34:443

186.31.77.42:443

81.97.154.100:443

71.117.132.169:443

24.139.72.117:443

67.165.206.193:993

106.51.52.111:443

47.196.192.184:443

71.197.126.250:443

24.95.61.62:443

47.22.148.6:443

195.12.154.8:443

71.163.223.159:443

197.45.110.165:995

Targets

    • Target

      b5289434ddef2a2632677a29cae2b3f9eae823198b48222f636de5a751d7f4ad

    • Size

      1.2MB

    • MD5

      11f4a2a21dd134e6f8c909d3d8609e7b

    • SHA1

      a41e72ba8af4036c703a1da90dfd4be429c7c3b6

    • SHA256

      b5289434ddef2a2632677a29cae2b3f9eae823198b48222f636de5a751d7f4ad

    • SHA512

      acd645237976acb56f97c43e0669cebb5f7200df2b76ebdb242b7ab2e381404daa45716351a7668f4eb771b1c491dff4cd58ccc531bf55cb8f2d26e184f179ea

MITRE ATT&CK Enterprise v6

Tasks