General

  • Target
    35f41510137c3c35eab54c7d9ed2359f.dll
  • Size 1.3MB
  • Sample210415-83e5bl3fha
  • SHA256 b12073d6fb10eaa5c2d201c069693f72a45f53df4239ef34d5e4608a084603a4
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • qakbot

Botnet
  • clinton04

Campaign
  • 1618322109

C2
  • 75.137.47.174:443

  • 140.82.49.12:443

  • 151.205.102.42:443

  • 24.226.156.153:443

  • 24.43.22.221:993

  • 216.201.162.158:443

  • 76.25.142.196:443

  • 149.28.99.97:995

  • 149.28.101.90:2222

  • 207.246.116.237:8443

  • 149.28.99.97:443

  • 45.63.107.192:2222

  • 45.32.211.207:2222

  • 149.28.101.90:443

  • 45.77.117.108:995

  • 207.246.77.75:443

  • 207.246.77.75:8443

  • 149.28.98.196:2222

  • 45.32.211.207:995

  • 45.32.211.207:443

Targets

    • Target
      35f41510137c3c35eab54c7d9ed2359f.dll
    • Size 1.3MB
    • SHA256 b12073d6fb10eaa5c2d201c069693f72a45f53df4239ef34d5e4608a084603a4
    • MD5 SHA1 SHA512

MITRE ATT&CK Enterprise v6

Tasks