General

  • Target

    303359ab1aa4f432a3682d8afb1d14def70cba9cec42f91f716fd0cd16f62582

  • Size

    2.2MB

  • Sample

    220205-vrqntadeh9

  • MD5

    baf6a04bcaa0cb4b70986e351c84796f

  • SHA1

    65e9efe71ada045652c2445dbce5e909ddecfec8

  • SHA256

    303359ab1aa4f432a3682d8afb1d14def70cba9cec42f91f716fd0cd16f62582

  • SHA512

    61d28b7900a7177f719c2089722da6f7fc804757e9692f76acc97bf6ee2cdcdafa9b41e512356fdded4fbac35d43081b1dc5d3c0c7f9949635ffe303371fdadb

Malware Config

Extracted

Family

qakbot

Version

324.127

Botnet

spx95

Campaign

1586782660

C2

47.153.115.154:443

108.27.217.44:443

71.77.252.14:2222

64.19.74.29:995

186.135.93.204:443

96.236.225.10:443

24.37.178.158:443

68.59.27.48:443

76.170.77.99:443

206.183.190.53:995

47.136.224.60:443

68.174.15.223:443

108.188.46.240:995

72.29.181.77:2078

50.29.181.193:995

69.92.54.95:995

47.180.66.10:443

86.125.138.141:995

184.180.157.203:2222

78.96.148.177:443

Targets

    • Target

      303359ab1aa4f432a3682d8afb1d14def70cba9cec42f91f716fd0cd16f62582

    • Size

      2.2MB

    • MD5

      baf6a04bcaa0cb4b70986e351c84796f

    • SHA1

      65e9efe71ada045652c2445dbce5e909ddecfec8

    • SHA256

      303359ab1aa4f432a3682d8afb1d14def70cba9cec42f91f716fd0cd16f62582

    • SHA512

      61d28b7900a7177f719c2089722da6f7fc804757e9692f76acc97bf6ee2cdcdafa9b41e512356fdded4fbac35d43081b1dc5d3c0c7f9949635ffe303371fdadb

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Remote System Discovery

1
T1018

Tasks