General

  • Target
    44651,6679619213.dat
  • Size 1.3MB
  • Sample220404-rhtsbsfec3
  • SHA256 934cb585f33fe11bcd0e99f4df40de07eec50aae0c6d036527fc03fe6d7d0fc8
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • qakbot

Version
  • 403.549

Botnet
  • biden57

Campaign
  • 1649058178

C2
  • 45.9.20.200:443

  • 173.174.216.62:443

  • 187.207.7.231:61202

  • 207.170.238.231:443

  • 47.180.172.159:50010

  • 70.57.207.83:443

  • 83.110.75.97:2222

  • 58.105.167.36:50000

  • 47.23.89.62:993

  • 72.76.94.99:443

  • 83.110.157.57:2222

  • 45.241.145.252:995

  • 82.84.66.211:2222

  • 75.99.168.194:61201

  • 144.202.3.39:443

  • 45.63.1.12:995

  • 149.28.238.199:995

  • 140.82.63.183:443

  • 45.63.1.12:443

  • 144.202.3.39:995

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target
      44651,6679619213.dat
    • Size 1.3MB
    • SHA256 934cb585f33fe11bcd0e99f4df40de07eec50aae0c6d036527fc03fe6d7d0fc8
    • MD5 SHA1 SHA512

MITRE ATT&CK Matrix

Tasks