General

  • Target

    tmp/263acfc1ee6fa4f0a65eae75dfcef1996dd4650a961dd5ec2020d37ee8ba392b.exe

  • Size

    120KB

  • Sample

    211227-lh8ctscec6

  • MD5

    8de802e64b88d3c81e880b0fbbf8f0bd

  • SHA1

    6749b6d049923060ee76e402c1cf5e9f25803956

  • SHA256

    263acfc1ee6fa4f0a65eae75dfcef1996dd4650a961dd5ec2020d37ee8ba392b

  • SHA512

    c56343dfefa4d5661f6c7bfa4768ccc0540b095236e58720e8227c6c0cdbd08b2868410a5de721b88cdd802dae35a53023c3d2fdbec1d6ce42ea54e9f6efd0e1

Malware Config

Extracted

Family

qakbot

Version

403.10

Botnet

cullinan

Campaign

1640170781

C2

14.96.108.245:61202

182.191.92.203:995

136.232.34.70:443

93.48.80.198:995

140.82.49.12:443

32.221.229.7:443

24.152.219.253:995

31.35.28.29:443

96.37.113.36:993

190.39.205.165:443

79.173.195.234:443

39.49.66.100:995

103.139.242.30:22

79.167.192.206:995

45.9.20.200:2211

24.95.61.62:443

37.210.226.125:61202

103.139.242.30:995

70.163.1.219:443

103.143.8.71:6881

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      tmp/263acfc1ee6fa4f0a65eae75dfcef1996dd4650a961dd5ec2020d37ee8ba392b.exe

    • Size

      120KB

    • MD5

      8de802e64b88d3c81e880b0fbbf8f0bd

    • SHA1

      6749b6d049923060ee76e402c1cf5e9f25803956

    • SHA256

      263acfc1ee6fa4f0a65eae75dfcef1996dd4650a961dd5ec2020d37ee8ba392b

    • SHA512

      c56343dfefa4d5661f6c7bfa4768ccc0540b095236e58720e8227c6c0cdbd08b2868410a5de721b88cdd802dae35a53023c3d2fdbec1d6ce42ea54e9f6efd0e1

MITRE ATT&CK Matrix

Tasks