General

  • Target

    1304-57-0x0000000000A90000-0x0000000000B1F000-memory.dmp

  • Size

    572KB

  • Sample

    220408-r718psahal

  • MD5

    e65640f36d1e9931791bbcb180427f42

  • SHA1

    eac521d3b15f4d198fa7aa84d1ced407bc9dfdb9

  • SHA256

    0249fafe29f14e5a86f196b32734d2678009d6ce70f688121924d348287489f1

  • SHA512

    da5c119bfbf220f48af6fc36f635b85f9d53aea6f4826f5246debf47292a58cd15628fc8f3d339a22b20eefc030e96bb34f3763d02c2d31db6c9d2bbd52034df

Score
10/10

Malware Config

Extracted

Family

qakbot

Version

403.573

Botnet

AA

Campaign

1649273304

C2

83.110.75.97:2222

47.23.89.62:993

187.207.48.194:61202

45.63.1.12:995

140.82.63.183:995

45.76.167.26:995

140.82.63.183:443

144.202.2.175:995

144.202.3.39:443

149.28.238.199:443

144.202.3.39:995

45.63.1.12:443

149.28.238.199:995

45.76.167.26:443

144.202.2.175:443

100.1.108.246:443

32.221.224.140:995

24.55.67.176:443

31.35.28.29:443

70.51.134.168:2222

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      1304-57-0x0000000000A90000-0x0000000000B1F000-memory.dmp

    • Size

      572KB

    • MD5

      e65640f36d1e9931791bbcb180427f42

    • SHA1

      eac521d3b15f4d198fa7aa84d1ced407bc9dfdb9

    • SHA256

      0249fafe29f14e5a86f196b32734d2678009d6ce70f688121924d348287489f1

    • SHA512

      da5c119bfbf220f48af6fc36f635b85f9d53aea6f4826f5246debf47292a58cd15628fc8f3d339a22b20eefc030e96bb34f3763d02c2d31db6c9d2bbd52034df

    Score
    3/10

MITRE ATT&CK Matrix

Tasks