Description
Qbot or Qakbot is a sophisticated worm with banking capabilities.
44490.6705313657.dat
534KB
211021-vftw4abdeq
f0be8564345b34916f8b78001baf717d
b0dd2e978c6504df6b08b6e8566af8cde0ae8f4f
834de7884888e755f1f99061d4c019cfad3bfab15eda47b5d5e7b3f0755dee59
2d492277f7efe3277acfa7d325a2952896db812a6d39c03f5cf483a5901782a489c6aae347b516aa552accec1be32af119d473e60cc95ecc05d36e18563af3b1
Family | qakbot |
Version | 402.363 |
Botnet | biden54 |
Campaign | 1634802135 |
C2 |
81.250.153.227:2222 120.150.218.241:995 76.25.142.196:443 63.143.92.99:995 89.101.97.139:443 136.143.11.232:443 81.213.59.22:443 136.232.34.70:443 140.82.49.12:443 37.208.181.198:61200 78.191.24.189:995 216.201.162.158:443 197.89.144.102:443 89.137.52.44:443 182.176.180.73:443 173.21.10.71:2222 117.198.156.56:443 196.207.140.40:995 103.142.10.177:443 24.231.209.2:6881 27.223.92.142:995 96.246.158.154:995 71.74.12.34:443 24.231.209.2:2222 75.188.35.168:443 209.210.95.228:995 73.151.236.31:443 220.255.25.187:2222 187.156.134.254:443 41.235.69.115:443 189.175.219.53:80 108.4.67.252:443 209.210.95.228:993 67.165.206.193:993 173.25.162.221:443 100.1.119.41:443 93.48.58.123:2222 65.100.174.110:443 201.137.10.225:443 24.229.150.54:995 146.66.238.74:443 68.204.7.158:443 37.208.181.198:443 41.86.42.158:995 189.135.16.92:443 187.75.66.160:995 72.173.78.211:443 37.117.191.19:2222 94.200.181.154:443 109.12.111.14:443 |
Attributes |
salt jHxastDcds)oMc=jvh7wdUhxcsdt2 |
44490.6705313657.dat
f0be8564345b34916f8b78001baf717d
534KB
b0dd2e978c6504df6b08b6e8566af8cde0ae8f4f
834de7884888e755f1f99061d4c019cfad3bfab15eda47b5d5e7b3f0755dee59
2d492277f7efe3277acfa7d325a2952896db812a6d39c03f5cf483a5901782a489c6aae347b516aa552accec1be32af119d473e60cc95ecc05d36e18563af3b1
Qbot or Qakbot is a sophisticated worm with banking capabilities.