General

  • Target

    7d6abea1558c05f9be789478d9c4ae54507ce48cb748c887dc260c29194faad3

  • Size

    2.3MB

  • Sample

    210509-dagafjhrp2

  • MD5

    887ed3aea3e86ac235bcf263a521d35c

  • SHA1

    a18256191236cfa1b2030554aeb9ad563ac0b427

  • SHA256

    7d6abea1558c05f9be789478d9c4ae54507ce48cb748c887dc260c29194faad3

  • SHA512

    11610f66a64f8e0d480aa3d15f902519a8fc610d98d13cb971cce42b9da209ce455b38713263b840b8b24f66c53d16dd0f2d9cf2497fe768aac8af0032c0a4b6

Malware Config

Extracted

Family

qakbot

Version

324.127

Botnet

spx96

Campaign

1586873043

C2

72.209.191.27:443

173.22.120.11:2222

108.227.161.27:995

172.87.134.226:443

181.197.195.138:995

98.21.52.194:443

76.180.69.236:443

68.98.142.248:443

68.52.164.175:443

39.59.63.142:995

35.142.126.181:443

96.35.170.82:2222

75.111.145.5:443

47.214.144.253:443

74.105.139.160:443

67.8.103.21:443

50.108.212.180:443

83.25.7.201:2222

188.25.237.208:443

184.167.2.251:2222

Targets

    • Target

      7d6abea1558c05f9be789478d9c4ae54507ce48cb748c887dc260c29194faad3

    • Size

      2.3MB

    • MD5

      887ed3aea3e86ac235bcf263a521d35c

    • SHA1

      a18256191236cfa1b2030554aeb9ad563ac0b427

    • SHA256

      7d6abea1558c05f9be789478d9c4ae54507ce48cb748c887dc260c29194faad3

    • SHA512

      11610f66a64f8e0d480aa3d15f902519a8fc610d98d13cb971cce42b9da209ce455b38713263b840b8b24f66c53d16dd0f2d9cf2497fe768aac8af0032c0a4b6

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

Remote System Discovery

1
T1018

Tasks