General

  • Target

    2b30000.dll

  • Size

    120KB

  • Sample

    211008-w58xzsege5

  • MD5

    0865757dfe54c2d01c5cef5bfd3162c5

  • SHA1

    1ae6a37499955d156a075ada2c1ce1b4d2ae6dc8

  • SHA256

    0c988f0025be7aa8f54adfd990333cb5acb286fe7f6effcf10ff34d881553d54

  • SHA512

    4b7baa7f2ee50b22cb5a58f9e7a98fde3c7e0c796332926380dccd2a2959aaaa626c8f392cb6dbaaed81ee42dee0860c84c3bbb75a4401aabc64e46ef13b2709

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

tr

Campaign

1633597626

C2

120.150.218.241:995

185.250.148.74:443

89.137.52.44:443

66.103.170.104:2222

86.8.177.143:443

216.201.162.158:443

174.54.193.186:443

103.148.120.144:443

188.50.169.158:443

124.123.42.115:2222

140.82.49.12:443

199.27.127.129:443

81.241.252.59:2078

209.142.97.161:995

209.50.20.255:443

73.230.205.91:443

200.232.214.222:995

103.142.10.177:443

2.222.167.138:443

41.228.22.180:443

Targets

    • Target

      2b30000.dll

    • Size

      120KB

    • MD5

      0865757dfe54c2d01c5cef5bfd3162c5

    • SHA1

      1ae6a37499955d156a075ada2c1ce1b4d2ae6dc8

    • SHA256

      0c988f0025be7aa8f54adfd990333cb5acb286fe7f6effcf10ff34d881553d54

    • SHA512

      4b7baa7f2ee50b22cb5a58f9e7a98fde3c7e0c796332926380dccd2a2959aaaa626c8f392cb6dbaaed81ee42dee0860c84c3bbb75a4401aabc64e46ef13b2709

MITRE ATT&CK Matrix

Tasks