Resubmissions

13-07-2021 14:44

210713-b4xa2dtap6 10

11-07-2021 01:46

210711-mw4831xkka 10

General

  • Target

    httpd.exe

  • Size

    640KB

  • Sample

    210713-b4xa2dtap6

  • MD5

    c81ad76b9368eeaaeb87944249e3e91a

  • SHA1

    8307a0721471142daa83e7b86223ae04464a44c2

  • SHA256

    8f0845ff3528d020c40aea3cf8f35f79b55f381a6e21cfd7a25708cd1ab39e64

  • SHA512

    486cb80646018b4cf56b3c24e1ad806356fbb7c490f942f1fb77202a085f3ae8d1d1dd6f427f5b44420db33a8548400a2815e535940573e7954a3fa876304387

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

tr

Campaign

1619706851

C2

24.117.107.120:443

190.85.91.154:443

72.252.201.69:443

189.210.115.207:443

71.41.184.10:3389

81.97.154.100:443

50.29.166.232:995

140.82.49.12:443

75.137.47.174:443

71.74.12.34:443

73.25.124.140:2222

149.28.99.97:2222

45.77.115.208:2222

45.32.211.207:995

207.246.116.237:443

149.28.99.97:443

207.246.77.75:443

149.28.98.196:995

207.246.116.237:2222

45.77.115.208:8443

Targets

    • Target

      httpd.exe

    • Size

      640KB

    • MD5

      c81ad76b9368eeaaeb87944249e3e91a

    • SHA1

      8307a0721471142daa83e7b86223ae04464a44c2

    • SHA256

      8f0845ff3528d020c40aea3cf8f35f79b55f381a6e21cfd7a25708cd1ab39e64

    • SHA512

      486cb80646018b4cf56b3c24e1ad806356fbb7c490f942f1fb77202a085f3ae8d1d1dd6f427f5b44420db33a8548400a2815e535940573e7954a3fa876304387

MITRE ATT&CK Matrix

Tasks