General

  • Target

    44364.6253908565.dat =^_^=

  • Size

    719KB

  • Sample

    210617-vmdab4bvde

  • MD5

    be2f7d2ac96d27dc79e617bd2bd06b15

  • SHA1

    de366e1375005d1cd2c56d84792786b57e49c55c

  • SHA256

    1dfa043bed7c84dbdc696593adfa332a577c0a55c408a2595b72396d4414fa74

  • SHA512

    c761bcf4efb4d7ce3ea06ad47c94d6f80cbf30f6dd841e78f955144fea5967d1d941ade595ec46c3c66530a7dceade311cc132084726a8962e5e04b4e5123028

Malware Config

Extracted

Family

qakbot

Version

402.115

Botnet

clinton35

Campaign

1623917674

C2

86.220.60.247:2222

24.179.77.236:443

68.186.192.69:443

197.45.110.165:995

96.253.46.210:443

186.144.33.73:443

175.136.38.142:443

47.22.148.6:443

76.25.142.196:443

45.32.211.207:443

207.246.116.237:8443

45.77.115.208:443

45.77.115.208:995

149.28.101.90:2222

207.246.116.237:443

144.202.38.185:2222

149.28.101.90:995

207.246.77.75:443

207.246.77.75:995

207.246.77.75:2222

Targets

    • Target

      44364.6253908565.dat =^_^=

    • Size

      719KB

    • MD5

      be2f7d2ac96d27dc79e617bd2bd06b15

    • SHA1

      de366e1375005d1cd2c56d84792786b57e49c55c

    • SHA256

      1dfa043bed7c84dbdc696593adfa332a577c0a55c408a2595b72396d4414fa74

    • SHA512

      c761bcf4efb4d7ce3ea06ad47c94d6f80cbf30f6dd841e78f955144fea5967d1d941ade595ec46c3c66530a7dceade311cc132084726a8962e5e04b4e5123028

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Tasks