General

  • Target

    stage3_qbot_11may21.dll

  • Size

    217KB

  • Sample

    210511-kvcz7vyfkx

  • MD5

    756a6d0de4b43f0f986ae97d85e02870

  • SHA1

    9a181c8c1d8755fdf2dcf34b8f8f4a11a9e3cd9a

  • SHA256

    8829193147b9cfd845af5c3905765b7f750f0f4592938cd341cf57ca384c0818

  • SHA512

    2fa04c1197cda13811d2b35a59a95448973f48e2c0980db641dbde42dbd0c60b26f084c95cae1dfe7f521e02d0dcee91a52b949f5519b0c212bea4d6e99b7747

Malware Config

Extracted

Family

qakbot

Version

402.12

Botnet

notset

Campaign

1618398961

C2

47.196.192.184:443

216.201.162.158:443

136.232.34.70:443

71.41.184.10:3389

140.82.49.12:443

45.63.107.192:2222

45.63.107.192:443

149.28.98.196:443

45.32.211.207:443

144.202.38.185:443

45.77.115.208:2222

45.77.115.208:8443

207.246.116.237:995

45.77.117.108:443

149.28.99.97:443

149.28.99.97:995

149.28.98.196:995

45.32.211.207:995

45.32.211.207:2222

149.28.98.196:2222

Targets

    • Target

      stage3_qbot_11may21.dll

    • Size

      217KB

    • MD5

      756a6d0de4b43f0f986ae97d85e02870

    • SHA1

      9a181c8c1d8755fdf2dcf34b8f8f4a11a9e3cd9a

    • SHA256

      8829193147b9cfd845af5c3905765b7f750f0f4592938cd341cf57ca384c0818

    • SHA512

      2fa04c1197cda13811d2b35a59a95448973f48e2c0980db641dbde42dbd0c60b26f084c95cae1dfe7f521e02d0dcee91a52b949f5519b0c212bea4d6e99b7747

MITRE ATT&CK Matrix

Tasks