General

  • Target

    qakbot.dll

  • Size

    607KB

  • Sample

    211129-mjpgsafac8

  • MD5

    90aac91ba4336bdb252dee699d32d78d

  • SHA1

    d281f5c4839506d88f06a549b75fcd2a5c0fa80c

  • SHA256

    edfe1d500855331f71ef12b7e459af1224a5ff3bca89ab7cd0dac930fd77c41a

  • SHA512

    d227eee35a50dfbb623f7dd24164b18e1ae776c39e0c8aff786f24cc65add1a86a3c239a3ed2032a2aa22d8938f4413ec99f627134744fe9b35d8d697b8c173f

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

notset

Campaign

1632819510

C2

196.217.156.63:995

120.150.218.241:995

95.77.223.148:443

185.250.148.74:443

181.118.183.94:443

105.198.236.99:443

140.82.49.12:443

37.210.152.224:995

89.101.97.139:443

81.241.252.59:2078

27.223.92.142:995

81.250.153.227:2222

73.151.236.31:443

47.22.148.6:443

122.11.220.212:2222

120.151.47.189:443

199.27.127.129:443

216.201.162.158:443

136.232.34.70:443

76.25.142.196:443

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      qakbot.dll

    • Size

      607KB

    • MD5

      90aac91ba4336bdb252dee699d32d78d

    • SHA1

      d281f5c4839506d88f06a549b75fcd2a5c0fa80c

    • SHA256

      edfe1d500855331f71ef12b7e459af1224a5ff3bca89ab7cd0dac930fd77c41a

    • SHA512

      d227eee35a50dfbb623f7dd24164b18e1ae776c39e0c8aff786f24cc65add1a86a3c239a3ed2032a2aa22d8938f4413ec99f627134744fe9b35d8d697b8c173f

MITRE ATT&CK Matrix

Tasks