General

  • Target

    10000000.27a6ed6707d1f8ef9666b759c6af8aab9bea90f1d3eb7b1cad9e7ebeadb2998d.dll.zip

  • Size

    136KB

  • Sample

    210503-nlv96ly6ee

  • MD5

    b77f7d42713170d2273428c000c19773

  • SHA1

    326579db1a9a442810c82adf4912e96a99f8b4c6

  • SHA256

    adbfd3cd0f0b68002951a7c2c0917c435d94028059e47cc69c8891efc599d8c1

  • SHA512

    19685a647c310dde0f5e6715fb174ded7df45e63bdbe80db2fb800a0a02e958816fb93c7ad49483f74eeb145974f5555bfb096bdaf22adb7410f8bd099318c96

Score
10/10

Malware Config

Extracted

Family

qakbot

Version

402.12

Botnet

tr

Campaign

1618935072

C2

140.82.49.12:443

190.85.91.154:443

96.37.113.36:993

71.41.184.10:3389

186.31.46.121:443

73.25.124.140:2222

109.12.111.14:443

24.229.150.54:995

45.32.211.207:443

45.77.117.108:443

45.77.117.108:8443

149.28.98.196:443

149.28.98.196:2222

144.202.38.185:443

144.202.38.185:995

45.32.211.207:995

207.246.116.237:995

149.28.99.97:995

45.63.107.192:2222

149.28.101.90:995

Targets

    • Target

      10000000.27a6ed6707d1f8ef9666b759c6af8aab9bea90f1d3eb7b1cad9e7ebeadb2998d.dll

    • Size

      217KB

    • MD5

      3fdda8731490502aa35585467df5ae81

    • SHA1

      e7c7f3a72a6931bb60f94ac2ad223dc02390cb00

    • SHA256

      94805ee1f8acb8d0d6a6f4cfafa4ead07d09e83e02654c9938017493861d029c

    • SHA512

      bc19d2995bf1d845fe324d32d623443aaf8e08e93d3128f88f15acced3e0dbc42d437452c87763d340ee68dede41f9201038f5c472ed568c90c8da3b83c3e7f5

    Score
    3/10

MITRE ATT&CK Matrix

Tasks