General

  • Target

    b4abdad039b0eea9b5dae6f28c9945cb18d3603282866fb15c37697d14fff529.dll

  • Size

    1.6MB

  • Sample

    211107-jw15kahgc6

  • MD5

    4f7a4448b2e7d0618b86ee1eb62469e9

  • SHA1

    c5854232e23a72caa5a719dfb1badb58a98cac3a

  • SHA256

    b4abdad039b0eea9b5dae6f28c9945cb18d3603282866fb15c37697d14fff529

  • SHA512

    40ca8de592e8cb4ff50e3fd5a82dc1a6695cc137efee27883e20f560dd47ed0b59c2fdb7a5c6fe71f94088abce3c69760b17bba9f480aa3b5fac44bdba6d49fc

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

tr

Campaign

1634541613

C2

120.150.218.241:995

24.119.214.7:443

103.143.8.71:443

81.241.252.59:2078

81.250.153.227:2222

174.54.193.186:443

73.52.50.32:443

39.49.122.240:995

86.220.112.26:2222

103.82.211.39:465

78.191.38.33:995

216.201.162.158:443

181.118.183.94:443

66.177.215.152:0

208.78.220.143:443

94.200.181.154:443

136.232.34.70:443

136.143.11.232:443

81.213.59.22:443

103.82.211.39:990

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      b4abdad039b0eea9b5dae6f28c9945cb18d3603282866fb15c37697d14fff529.dll

    • Size

      1.6MB

    • MD5

      4f7a4448b2e7d0618b86ee1eb62469e9

    • SHA1

      c5854232e23a72caa5a719dfb1badb58a98cac3a

    • SHA256

      b4abdad039b0eea9b5dae6f28c9945cb18d3603282866fb15c37697d14fff529

    • SHA512

      40ca8de592e8cb4ff50e3fd5a82dc1a6695cc137efee27883e20f560dd47ed0b59c2fdb7a5c6fe71f94088abce3c69760b17bba9f480aa3b5fac44bdba6d49fc

MITRE ATT&CK Enterprise v6

Tasks