General

  • Target

    812-57-0x0000000000970000-0x0000000000992000-memory.dmp

  • Size

    136KB

  • Sample

    220525-rl4rpsbcb9

  • MD5

    4c5554e6df99aacec9815d41b91d7494

  • SHA1

    c8c321fb2e2db45c9cae4e3dffac236fee208519

  • SHA256

    ada71b353d639cfd9970ef89f7590c2fccbafbab5934469fabf660fffdd52574

  • SHA512

    97de31deb31cc4cfa348e41fb4f090e04a413d9b2021245806812a8673b9d089ad82b6c1309f1ee024568541094af91761ee4bbacc010c30f9b47f3b31420860

Score
10/10

Malware Config

Extracted

Family

qakbot

Version

403.690

Botnet

AA

Campaign

1653399733

C2

1.161.104.31:443

47.156.131.10:443

201.172.23.68:2222

187.251.132.144:22

31.215.69.176:443

191.250.188.54:443

93.48.80.198:995

80.11.74.81:2222

38.70.253.226:2222

100.1.108.246:443

5.32.41.45:443

188.161.200.40:995

201.242.206.44:2222

208.107.221.224:443

47.23.89.60:993

75.99.168.194:443

103.246.242.202:443

200.148.9.225:32101

37.210.169.150:2222

79.129.121.68:995

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      812-57-0x0000000000970000-0x0000000000992000-memory.dmp

    • Size

      136KB

    • MD5

      4c5554e6df99aacec9815d41b91d7494

    • SHA1

      c8c321fb2e2db45c9cae4e3dffac236fee208519

    • SHA256

      ada71b353d639cfd9970ef89f7590c2fccbafbab5934469fabf660fffdd52574

    • SHA512

      97de31deb31cc4cfa348e41fb4f090e04a413d9b2021245806812a8673b9d089ad82b6c1309f1ee024568541094af91761ee4bbacc010c30f9b47f3b31420860

    Score
    1/10

MITRE ATT&CK Matrix

Tasks