General

  • Target

    553433a567899ce82678cded67c692fd948427620373662700b9b2eee774bcb0

  • Size

    2.0MB

  • Sample

    210509-z3fhphrs1n

  • MD5

    ab69c4a7b92fb29daed3b8404d2ef6bd

  • SHA1

    e68428425027f6ff299bd8a7b3d270b88565c0c8

  • SHA256

    553433a567899ce82678cded67c692fd948427620373662700b9b2eee774bcb0

  • SHA512

    ff3f6b2d085045518f2ae9c2bafee54394854336385ac0015b5f9387f0f162c6a57b7dbab0f83c12697cf449a5405e85c3a8054a5b1d8c70a9cee1bc479270b1

Malware Config

Extracted

Family

qakbot

Version

324.127

Botnet

spx106

Campaign

1588083274

C2

5.2.149.216:443

5.182.39.156:443

156.222.184.101:995

208.126.142.17:443

108.21.54.174:443

74.129.26.223:443

72.204.242.138:443

87.65.204.240:995

136.228.103.44:443

92.114.85.210:995

184.180.157.203:2222

72.142.106.198:995

151.205.102.42:443

172.78.181.79:443

72.181.15.240:443

186.29.97.27:443

98.243.187.85:443

137.99.224.198:443

108.21.107.203:443

97.81.255.189:443

Targets

    • Target

      553433a567899ce82678cded67c692fd948427620373662700b9b2eee774bcb0

    • Size

      2.0MB

    • MD5

      ab69c4a7b92fb29daed3b8404d2ef6bd

    • SHA1

      e68428425027f6ff299bd8a7b3d270b88565c0c8

    • SHA256

      553433a567899ce82678cded67c692fd948427620373662700b9b2eee774bcb0

    • SHA512

      ff3f6b2d085045518f2ae9c2bafee54394854336385ac0015b5f9387f0f162c6a57b7dbab0f83c12697cf449a5405e85c3a8054a5b1d8c70a9cee1bc479270b1

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

Remote System Discovery

1
T1018

Tasks