General

  • Target

    e7018ba6ad1b8c97bc751a38cb6c22a653b1a0aa297d245595b46fcd3b9d6bee

  • Size

    2.0MB

  • Sample

    210509-c7kgjwvb12

  • MD5

    e5f6b6dc4a63393415468b905c321a52

  • SHA1

    cc557a945047ba52718ee59cc50049ca7ff9cacc

  • SHA256

    e7018ba6ad1b8c97bc751a38cb6c22a653b1a0aa297d245595b46fcd3b9d6bee

  • SHA512

    0f63d9895cc302ece902b875636642d287953a85aac34fd837529672102e7f7f3683f8cc3e30dcc2ae8300ab82f88857f21c432dad7dd4fee8ec16b423b23a98

Malware Config

Extracted

Family

qakbot

Version

324.136

Botnet

spx112

Campaign

1588678797

C2

81.133.234.36:2222

31.5.21.66:443

41.233.43.51:995

96.37.113.36:443

86.233.4.153:2222

98.118.156.172:443

89.34.214.130:443

79.116.237.126:443

72.16.212.107:465

72.36.59.46:2222

5.74.188.119:995

67.209.195.198:3389

98.32.60.217:443

24.46.40.189:2222

77.159.149.74:443

174.30.24.61:443

98.115.138.61:443

189.159.82.203:995

108.21.54.174:443

81.103.144.77:443

Targets

    • Target

      e7018ba6ad1b8c97bc751a38cb6c22a653b1a0aa297d245595b46fcd3b9d6bee

    • Size

      2.0MB

    • MD5

      e5f6b6dc4a63393415468b905c321a52

    • SHA1

      cc557a945047ba52718ee59cc50049ca7ff9cacc

    • SHA256

      e7018ba6ad1b8c97bc751a38cb6c22a653b1a0aa297d245595b46fcd3b9d6bee

    • SHA512

      0f63d9895cc302ece902b875636642d287953a85aac34fd837529672102e7f7f3683f8cc3e30dcc2ae8300ab82f88857f21c432dad7dd4fee8ec16b423b23a98

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

Remote System Discovery

1
T1018

Tasks