General

  • Target

    5c780d757fed0ecbb7aa490edf37a1a03494d071a5ea97234c1be7831652b43d

  • Size

    2.3MB

  • Sample

    220205-sph5vacfc4

  • MD5

    25e43826f7b771724009416cab2c097b

  • SHA1

    9973ab34a6f3024b35fb403d3443f79ae9850f10

  • SHA256

    5c780d757fed0ecbb7aa490edf37a1a03494d071a5ea97234c1be7831652b43d

  • SHA512

    63ff59ab291ba969e2e9a5ba55e7366b5989a4bf516a4a20f830c9cb290639e7faa9fb4448295cd457985447c9f7281e570f0a6f8b95426b43ebfcdf11bb9ca2

Malware Config

Extracted

Family

qakbot

Version

324.127

Botnet

spx101

Campaign

1587470509

C2

98.213.28.175:443

89.38.74.46:443

75.81.25.223:995

72.16.57.99:443

173.3.132.17:995

24.229.245.124:995

67.165.206.193:995

66.25.168.167:2222

68.39.177.147:995

100.38.123.22:443

66.44.96.184:443

75.110.93.212:443

110.142.205.182:443

72.16.212.107:465

67.251.155.12:443

100.40.48.96:443

24.55.152.50:995

65.131.79.162:995

181.126.86.223:443

73.169.47.57:443

Targets

    • Target

      5c780d757fed0ecbb7aa490edf37a1a03494d071a5ea97234c1be7831652b43d

    • Size

      2.3MB

    • MD5

      25e43826f7b771724009416cab2c097b

    • SHA1

      9973ab34a6f3024b35fb403d3443f79ae9850f10

    • SHA256

      5c780d757fed0ecbb7aa490edf37a1a03494d071a5ea97234c1be7831652b43d

    • SHA512

      63ff59ab291ba969e2e9a5ba55e7366b5989a4bf516a4a20f830c9cb290639e7faa9fb4448295cd457985447c9f7281e570f0a6f8b95426b43ebfcdf11bb9ca2

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Remote System Discovery

1
T1018

Tasks