General

  • Target
    qbot_brrr.dat
  • Size 1.4MB
  • Sample210413-n95xxblbte
  • SHA256 c5db8f1fd3c0c9e620a614cca194af7f1c1066c30e1cd79a948e039b644db0f6
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • qakbot

Botnet
  • obama27

Campaign
  • 1618239848

C2
  • 193.248.221.184:2222

  • 96.61.23.88:995

  • 75.67.192.125:443

  • 78.63.226.32:443

  • 186.28.181.226:443

  • 45.46.53.140:2222

  • 190.85.91.154:443

  • 105.198.236.101:443

  • 136.232.34.70:443

  • 140.82.49.12:443

  • 197.45.110.165:995

  • 216.201.162.158:443

  • 189.210.115.207:443

  • 149.28.101.90:2222

  • 45.63.107.192:2222

  • 45.32.211.207:443

  • 45.32.211.207:995

  • 45.32.211.207:8443

  • 45.32.211.207:2222

  • 149.28.98.196:443

Targets

    • Target
      qbot_brrr.dat
    • Size 1.4MB
    • SHA256 c5db8f1fd3c0c9e620a614cca194af7f1c1066c30e1cd79a948e039b644db0f6
    • MD5 SHA1 SHA512

MITRE ATT&CK Enterprise v6

Tasks