General

  • Target

    b2b311ee22491e42d699d22dd88bf04e

  • Size

    1.3MB

  • Sample

    210415-gb23jmqbqn

  • MD5

    b2b311ee22491e42d699d22dd88bf04e

  • SHA1

    b625bd806dca9330586ea6719a5aa69c13bab94c

  • SHA256

    cb753522ff824bd6a0c4599f74103912f082ae16da357025783bcce132932280

  • SHA512

    1e973a163ab070ab085c84f767c571b604f5e56b351b14b4838b762f51d3d06dc5a3d706b4af1a107c505eafb012d0ce5f7eef76a8a184c5d613a70c38be76a5

Malware Config

Extracted

Family

qakbot

Botnet

tr

Campaign

1618225074

C2

197.45.110.165:995

216.201.162.158:443

71.74.12.34:443

45.63.107.192:2222

149.28.101.90:2222

45.32.211.207:443

45.32.211.207:995

45.32.211.207:8443

45.32.211.207:2222

149.28.99.97:995

149.28.98.196:443

149.28.101.90:443

149.28.101.90:8443

207.246.77.75:2222

207.246.116.237:443

207.246.116.237:995

207.246.116.237:2222

45.77.117.108:995

149.28.99.97:443

45.63.107.192:443

Targets

    • Target

      b2b311ee22491e42d699d22dd88bf04e

    • Size

      1.3MB

    • MD5

      b2b311ee22491e42d699d22dd88bf04e

    • SHA1

      b625bd806dca9330586ea6719a5aa69c13bab94c

    • SHA256

      cb753522ff824bd6a0c4599f74103912f082ae16da357025783bcce132932280

    • SHA512

      1e973a163ab070ab085c84f767c571b604f5e56b351b14b4838b762f51d3d06dc5a3d706b4af1a107c505eafb012d0ce5f7eef76a8a184c5d613a70c38be76a5

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Tasks