General

  • Target

    852-57-0x0000000000540000-0x0000000000562000-memory.dmp

  • Size

    136KB

  • Sample

    220525-rj3rmabca2

  • MD5

    b3223920bf62bb13acda383f6d5fb5fb

  • SHA1

    4d9b0998457b95c1f1d07f7986c34b9bce6a58b3

  • SHA256

    10539e41111cc2701c1c0e890572d581f789b9b4704d8317408a166fe67ecd32

  • SHA512

    fcfa7ad271e2c2a437f2d45320cbe2ce18350d173b2a32769b8c8e2ff941770692e849e32a3f8c21426c6bc8794c10de80e19563310afde467983b466a9dd675

Score
10/10

Malware Config

Extracted

Family

qakbot

Version

403.690

Botnet

AA

Campaign

1653399733

C2

1.161.104.31:443

47.156.131.10:443

201.172.23.68:2222

187.251.132.144:22

31.215.69.176:443

191.250.188.54:443

93.48.80.198:995

80.11.74.81:2222

38.70.253.226:2222

100.1.108.246:443

5.32.41.45:443

188.161.200.40:995

201.242.206.44:2222

208.107.221.224:443

47.23.89.60:993

75.99.168.194:443

103.246.242.202:443

200.148.9.225:32101

37.210.169.150:2222

79.129.121.68:995

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      852-57-0x0000000000540000-0x0000000000562000-memory.dmp

    • Size

      136KB

    • MD5

      b3223920bf62bb13acda383f6d5fb5fb

    • SHA1

      4d9b0998457b95c1f1d07f7986c34b9bce6a58b3

    • SHA256

      10539e41111cc2701c1c0e890572d581f789b9b4704d8317408a166fe67ecd32

    • SHA512

      fcfa7ad271e2c2a437f2d45320cbe2ce18350d173b2a32769b8c8e2ff941770692e849e32a3f8c21426c6bc8794c10de80e19563310afde467983b466a9dd675

    Score
    1/10

MITRE ATT&CK Matrix

Tasks