General

  • Target
    937f940caf972b6c393dfc47cf872a14.dll
  • Size 1.4MB
  • Sample210415-fx8qmcfv1e
  • SHA256 5cf03d4c4ed5a25dc90ecc5b2b4624c808b901a308e1eac4881e87460eff05ab
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • qakbot

Botnet
  • tr

Campaign
  • 1618225074

C2
  • 197.45.110.165:995

  • 216.201.162.158:443

  • 71.74.12.34:443

  • 45.63.107.192:2222

  • 149.28.101.90:2222

  • 45.32.211.207:443

  • 45.32.211.207:995

  • 45.32.211.207:8443

  • 45.32.211.207:2222

  • 149.28.99.97:995

  • 149.28.98.196:443

  • 149.28.101.90:443

  • 149.28.101.90:8443

  • 207.246.77.75:2222

  • 207.246.116.237:443

  • 207.246.116.237:995

  • 207.246.116.237:2222

  • 45.77.117.108:995

  • 149.28.99.97:443

  • 45.63.107.192:443

Targets

    • Target
      937f940caf972b6c393dfc47cf872a14.dll
    • Size 1.4MB
    • SHA256 5cf03d4c4ed5a25dc90ecc5b2b4624c808b901a308e1eac4881e87460eff05ab
    • MD5 SHA1 SHA512

MITRE ATT&CK Enterprise v6

Tasks