General

  • Target

    download.dll

  • Size

    1.4MB

  • Sample

    210413-p22g7g2dq6

  • MD5

    cb183d41e2602bb4d8085d13cf3f7989

  • SHA1

    03454ed22f18fea85b53051d3d6b1b8cd9eb6ce1

  • SHA256

    0023ef5174286a9c26796c0453612eeb9ff4896cc4682f5f2d56e0923a57d8fb

  • SHA512

    a7e914cf9f5aae9e0b6c999c2402dc807c87861551ac0ec9230015e74ad6e9c9891189486b3f9e68b081787d0d304a8342883c6dffbe67656da57d0a86a970dc

Malware Config

Extracted

Family

qakbot

Botnet

tr

Campaign

1618225074

C2

197.45.110.165:995

216.201.162.158:443

71.74.12.34:443

45.63.107.192:2222

149.28.101.90:2222

45.32.211.207:443

45.32.211.207:995

45.32.211.207:8443

45.32.211.207:2222

149.28.99.97:995

149.28.98.196:443

149.28.101.90:443

149.28.101.90:8443

207.246.77.75:2222

207.246.116.237:443

207.246.116.237:995

207.246.116.237:2222

45.77.117.108:995

149.28.99.97:443

45.63.107.192:443

Targets

    • Target

      download.dll

    • Size

      1.4MB

    • MD5

      cb183d41e2602bb4d8085d13cf3f7989

    • SHA1

      03454ed22f18fea85b53051d3d6b1b8cd9eb6ce1

    • SHA256

      0023ef5174286a9c26796c0453612eeb9ff4896cc4682f5f2d56e0923a57d8fb

    • SHA512

      a7e914cf9f5aae9e0b6c999c2402dc807c87861551ac0ec9230015e74ad6e9c9891189486b3f9e68b081787d0d304a8342883c6dffbe67656da57d0a86a970dc

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Tasks