General

  • Target

    9305e5d027f97d6b30532a66de06b10c0d5a8b7cc9bdfe8b0bafaa5cff5bbc6b

  • Size

    1.8MB

  • Sample

    220201-fpqtgahff8

  • MD5

    24ac3a913169d29cfb978c29d4351301

  • SHA1

    5ada1f0e80d02827be2ce572061887f7ede7b704

  • SHA256

    9305e5d027f97d6b30532a66de06b10c0d5a8b7cc9bdfe8b0bafaa5cff5bbc6b

  • SHA512

    8e926104ee28a9305186cd807e45f2e3cddfb8d7bf8f27e6898394fac39e748a99836950c8a30fb6756b96b09b1c60d7c6a8040b4be38a174579f5d66eda114d

Malware Config

Extracted

Family

qakbot

Version

324.70

Botnet

spx85

Campaign

1585211304

C2

174.82.131.155:995

173.172.205.216:443

71.233.73.222:995

208.126.142.17:443

68.14.210.246:22

96.57.237.162:443

74.138.18.247:443

47.40.244.237:443

71.213.61.215:995

216.201.162.158:443

72.38.44.119:995

47.41.3.57:443

67.250.184.157:443

47.153.115.154:443

173.79.220.156:443

108.27.217.44:443

75.81.25.223:995

67.209.195.198:3389

65.30.12.240:443

66.222.88.126:995

Targets

    • Target

      9305e5d027f97d6b30532a66de06b10c0d5a8b7cc9bdfe8b0bafaa5cff5bbc6b

    • Size

      1.8MB

    • MD5

      24ac3a913169d29cfb978c29d4351301

    • SHA1

      5ada1f0e80d02827be2ce572061887f7ede7b704

    • SHA256

      9305e5d027f97d6b30532a66de06b10c0d5a8b7cc9bdfe8b0bafaa5cff5bbc6b

    • SHA512

      8e926104ee28a9305186cd807e45f2e3cddfb8d7bf8f27e6898394fac39e748a99836950c8a30fb6756b96b09b1c60d7c6a8040b4be38a174579f5d66eda114d

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Remote System Discovery

1
T1018

Tasks