General

  • Target

    83edda1d0bffaf8fabaa6863aaa48630661ba064b7e497a4f1f0c41b22982b9c

  • Size

    1.9MB

  • Sample

    220201-f1qb3shccn

  • MD5

    36b8590b8c9bf98ebed5d66094a2a627

  • SHA1

    48a545da79bb4e166e28729c6658dc1e8cae1e9f

  • SHA256

    83edda1d0bffaf8fabaa6863aaa48630661ba064b7e497a4f1f0c41b22982b9c

  • SHA512

    3ad407dc6f9e52fbb28f60b8e848c1de060c67a96b046f4d16c743ae0d9cb37423fb3f9d2d5119344b18e18ae4a094fe7e9dd485183b80059f5209c2cb3fdb68

Malware Config

Extracted

Family

qakbot

Version

324.70

Botnet

spx85

Campaign

1585299593

C2

185.219.83.73:443

199.241.223.66:443

79.113.219.121:443

35.142.24.147:2222

71.68.197.202:995

50.108.212.180:443

47.153.115.154:995

108.227.161.27:995

47.136.224.60:443

65.30.12.240:443

79.114.194.106:443

209.137.209.163:995

5.12.213.152:2222

187.155.57.154:443

173.184.96.161:443

174.82.131.155:995

81.135.233.169:8443

173.172.205.216:443

71.233.73.222:995

208.126.142.17:443

Targets

    • Target

      83edda1d0bffaf8fabaa6863aaa48630661ba064b7e497a4f1f0c41b22982b9c

    • Size

      1.9MB

    • MD5

      36b8590b8c9bf98ebed5d66094a2a627

    • SHA1

      48a545da79bb4e166e28729c6658dc1e8cae1e9f

    • SHA256

      83edda1d0bffaf8fabaa6863aaa48630661ba064b7e497a4f1f0c41b22982b9c

    • SHA512

      3ad407dc6f9e52fbb28f60b8e848c1de060c67a96b046f4d16c743ae0d9cb37423fb3f9d2d5119344b18e18ae4a094fe7e9dd485183b80059f5209c2cb3fdb68

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Remote System Discovery

1
T1018

Tasks