General

  • Target

    9fd802cc98954dfb11a8e53cacee7ed1829b8746e061919dfdebd10924275fde

  • Size

    2.3MB

  • Sample

    220205-pc6htsbbf3

  • MD5

    112a8486e2ff5c18ba18793019431d54

  • SHA1

    1dac14c185394f16a259583a8076cf3e46bdcc8c

  • SHA256

    9fd802cc98954dfb11a8e53cacee7ed1829b8746e061919dfdebd10924275fde

  • SHA512

    9c40af61404144907421efc90b76f60c86d27c91b2e20504abde15ff783729863e476218cbbb7ffdcb7f4e21ab2b2525f67597ada4afc39187ac3fe891d284b8

Malware Config

Extracted

Family

qakbot

Version

324.127

Botnet

spx102

Campaign

1587561129

C2

68.1.171.93:443

98.213.28.175:443

31.5.189.71:443

75.81.25.223:995

86.106.126.91:443

216.201.162.158:443

80.14.209.42:2222

86.122.254.67:2222

98.26.50.62:995

197.166.90.151:443

71.58.21.235:443

78.96.177.188:443

73.137.187.150:443

188.173.185.139:443

46.214.136.6:443

86.124.227.238:443

104.36.135.227:443

76.111.128.194:443

81.245.66.237:995

71.220.222.169:443

Targets

    • Target

      9fd802cc98954dfb11a8e53cacee7ed1829b8746e061919dfdebd10924275fde

    • Size

      2.3MB

    • MD5

      112a8486e2ff5c18ba18793019431d54

    • SHA1

      1dac14c185394f16a259583a8076cf3e46bdcc8c

    • SHA256

      9fd802cc98954dfb11a8e53cacee7ed1829b8746e061919dfdebd10924275fde

    • SHA512

      9c40af61404144907421efc90b76f60c86d27c91b2e20504abde15ff783729863e476218cbbb7ffdcb7f4e21ab2b2525f67597ada4afc39187ac3fe891d284b8

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Remote System Discovery

1
T1018

Tasks