General

  • Target
    f47d4cc0fd011a1f8a74ced31d693742378f2ccb6b3d0b6b8d322cd31e62f897
  • Size 793KB
  • Sample210423-56xvm1bv2a
  • SHA256 f47d4cc0fd011a1f8a74ced31d693742378f2ccb6b3d0b6b8d322cd31e62f897
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • qakbot

Version
  • 402.12

Botnet
  • clinton08

Campaign
  • 1618995832

C2
  • 190.85.91.154:443

  • 140.82.49.12:443

  • 96.37.113.36:993

  • 73.25.124.140:2222

  • 71.41.184.10:3389

  • 50.244.112.106:443

  • 78.63.226.32:443

  • 24.152.219.253:995

  • 105.198.236.99:443

  • 149.28.101.90:8443

  • 149.28.101.90:443

  • 149.28.101.90:2222

  • 45.77.115.208:8443

  • 207.246.77.75:8443

  • 207.246.77.75:2222

  • 207.246.116.237:2222

  • 45.77.117.108:995

  • 144.202.38.185:2222

  • 207.246.77.75:995

  • 207.246.77.75:443

Targets

    • Target
      f47d4cc0fd011a1f8a74ced31d693742378f2ccb6b3d0b6b8d322cd31e62f897
    • Size 793KB
    • SHA256 f47d4cc0fd011a1f8a74ced31d693742378f2ccb6b3d0b6b8d322cd31e62f897
    • MD5 SHA1 SHA512

MITRE ATT&CK Enterprise v6

Tasks