General

  • Target

    0fa38d62e10a8aae27e6624c29e94dc0

  • Size

    1.2MB

  • Sample

    220407-tsg8dsfefk

  • MD5

    0fa38d62e10a8aae27e6624c29e94dc0

  • SHA1

    38eacb884c084f9e455e6e32002661a95bb7e4f5

  • SHA256

    1cdad75e7830e4ae946bb26c15be354676820710c2471d9ea6d24926fc0df86f

  • SHA512

    bb283a71face353a3cec670442ddef2b8eab5fcfe1d0893c7ed195880356f4181f1b56854a54e95174b518db7c72fa9e094954e81fa10149c6cfb3424b650419

Malware Config

Extracted

Family

qakbot

Version

403.573

Botnet

AA

Campaign

1649273252

C2

47.23.89.62:993

187.207.48.194:61202

45.63.1.12:995

140.82.63.183:995

45.76.167.26:995

140.82.63.183:443

144.202.2.175:995

144.202.3.39:443

149.28.238.199:443

144.202.3.39:995

45.63.1.12:443

149.28.238.199:995

45.76.167.26:443

144.202.2.175:443

100.1.108.246:443

32.221.224.140:995

24.55.67.176:443

31.35.28.29:443

70.51.134.168:2222

71.13.93.154:2222

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      0fa38d62e10a8aae27e6624c29e94dc0

    • Size

      1.2MB

    • MD5

      0fa38d62e10a8aae27e6624c29e94dc0

    • SHA1

      38eacb884c084f9e455e6e32002661a95bb7e4f5

    • SHA256

      1cdad75e7830e4ae946bb26c15be354676820710c2471d9ea6d24926fc0df86f

    • SHA512

      bb283a71face353a3cec670442ddef2b8eab5fcfe1d0893c7ed195880356f4181f1b56854a54e95174b518db7c72fa9e094954e81fa10149c6cfb3424b650419

MITRE ATT&CK Matrix

Tasks