General

  • Target
    2b42fb61e0f60af5a006ebf64e355e3e32faa446571151399498401ece26cc78
  • Size 1.2MB
  • Sample210326-wpggpzyqna
  • SHA256 2b42fb61e0f60af5a006ebf64e355e3e32faa446571151399498401ece26cc78
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • qakbot

Botnet
  • biden12

Campaign
  • 1615580905

C2
  • 24.229.150.54:995

  • 109.12.111.14:443

  • 173.21.10.71:2222

  • 81.214.126.173:2222

  • 75.118.1.141:443

  • 98.252.118.134:443

  • 71.74.12.34:443

  • 186.31.77.42:443

  • 81.97.154.100:443

  • 71.117.132.169:443

  • 24.139.72.117:443

  • 67.165.206.193:993

  • 106.51.52.111:443

  • 47.196.192.184:443

  • 71.197.126.250:443

  • 24.95.61.62:443

  • 47.22.148.6:443

  • 195.12.154.8:443

  • 71.163.223.159:443

  • 197.45.110.165:995

Targets

    • Target
      2b42fb61e0f60af5a006ebf64e355e3e32faa446571151399498401ece26cc78
    • Size 1.2MB
    • SHA256 2b42fb61e0f60af5a006ebf64e355e3e32faa446571151399498401ece26cc78
    • MD5 SHA1 SHA512

MITRE ATT&CK Enterprise v6

Tasks