General

  • Target

    b2da3dde57be906997e05ae0c488c94d8d4a8434d11c284d6ff748b1096d8ed4

  • Size

    2.0MB

  • Sample

    220205-m97faaagc2

  • MD5

    1e28288094b71d44c1653b6823b1cfbc

  • SHA1

    dbaf9aae0f05e111dba8cd6f58d448c5adcf1563

  • SHA256

    b2da3dde57be906997e05ae0c488c94d8d4a8434d11c284d6ff748b1096d8ed4

  • SHA512

    3b89ea4c0a38a1cb7dfb27a007adf974d976b25823c06ca7ff039043ae6a2ae046f63e2996a528b67e2fddedb2f60b87ea39e57f130a6078aa3a442c4e695506

Malware Config

Extracted

Family

qakbot

Version

324.127

Botnet

spx104

Campaign

1587729073

C2

73.30.244.90:443

216.16.178.115:443

103.216.191.12:443

50.29.181.193:995

47.180.66.10:443

66.26.160.37:443

75.105.224.113:995

71.213.29.14:995

85.122.141.42:995

73.218.212.147:443

98.22.66.236:443

187.19.151.218:995

108.34.131.96:443

173.79.220.156:443

98.32.60.217:443

94.52.160.218:443

71.80.66.107:443

89.137.162.193:443

108.190.151.108:2222

121.121.119.6:443

Targets

    • Target

      b2da3dde57be906997e05ae0c488c94d8d4a8434d11c284d6ff748b1096d8ed4

    • Size

      2.0MB

    • MD5

      1e28288094b71d44c1653b6823b1cfbc

    • SHA1

      dbaf9aae0f05e111dba8cd6f58d448c5adcf1563

    • SHA256

      b2da3dde57be906997e05ae0c488c94d8d4a8434d11c284d6ff748b1096d8ed4

    • SHA512

      3b89ea4c0a38a1cb7dfb27a007adf974d976b25823c06ca7ff039043ae6a2ae046f63e2996a528b67e2fddedb2f60b87ea39e57f130a6078aa3a442c4e695506

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Remote System Discovery

1
T1018

Tasks