General

  • Target

    7e154c033ea4c03a61975ff3138f21ec41da121022849a7b6819f4457793d59b

  • Size

    1.8MB

  • Sample

    210509-3zwebmn3hn

  • MD5

    026a322d332d021578ca9522c73b8ba1

  • SHA1

    09c4ae4bab842d728a774aea3f322bdbe3b44bb5

  • SHA256

    7e154c033ea4c03a61975ff3138f21ec41da121022849a7b6819f4457793d59b

  • SHA512

    e9455933db4cc26595dadc325b5d13f2b4ee35640fad7a28f9c2d9ce1164a6e48d0c2f3ca5a4c9216c82c203e031b59bc60dba7f01971b595c9ab66bff58175c

Malware Config

Extracted

Family

qakbot

Version

324.136

Botnet

spx111

Campaign

1588597375

C2

98.22.234.245:443

188.173.70.18:443

189.159.19.223:995

73.60.148.209:443

74.105.139.160:443

50.244.112.106:443

47.232.26.181:443

50.104.186.71:443

173.172.205.216:443

208.126.142.17:443

71.197.31.92:0

72.240.65.85:443

24.183.39.93:443

73.137.187.150:443

74.135.85.117:443

172.87.134.226:443

201.146.188.44:443

76.170.77.99:443

67.170.137.8:443

24.55.152.50:995

Targets

    • Target

      7e154c033ea4c03a61975ff3138f21ec41da121022849a7b6819f4457793d59b

    • Size

      1.8MB

    • MD5

      026a322d332d021578ca9522c73b8ba1

    • SHA1

      09c4ae4bab842d728a774aea3f322bdbe3b44bb5

    • SHA256

      7e154c033ea4c03a61975ff3138f21ec41da121022849a7b6819f4457793d59b

    • SHA512

      e9455933db4cc26595dadc325b5d13f2b4ee35640fad7a28f9c2d9ce1164a6e48d0c2f3ca5a4c9216c82c203e031b59bc60dba7f01971b595c9ab66bff58175c

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

Remote System Discovery

1
T1018

Tasks