General

  • Target

    sample_packed.exe

  • Size

    325KB

  • Sample

    220615-n2sslaedhp

  • MD5

    e1205ef15da2dbecb57b40ce43abe0f8

  • SHA1

    8525f7a7218923302f97f4eb3865a1e20c271521

  • SHA256

    a5f9efbd8eb8dbadaead5328b9e1f3ace32e1b92f2772048cac6d455b8810d4c

  • SHA512

    d963263077611a27a663a97853cba3bb1031f4ba051129f08b2bb702b1a4e7b5e9e701cf08032b0c5d4fe4247bc18978b159e8d4900d3f3c0f392eb80d4551eb

Malware Config

Extracted

Family

qakbot

Version

324.142

Botnet

spx133

Campaign

1591267427

C2

49.144.84.21:443

189.159.133.162:995

173.245.152.231:443

77.237.181.212:995

207.255.161.8:2078

76.187.8.160:443

207.255.161.8:2087

98.219.77.197:443

66.222.88.126:995

207.255.161.8:32102

108.58.9.238:995

47.152.210.233:443

1.40.42.4:443

188.27.71.163:443

82.127.193.151:2222

104.50.141.139:995

67.83.54.76:2222

86.126.97.183:2222

73.94.229.115:443

47.35.182.97:443

Targets

    • Target

      sample_packed.exe

    • Size

      325KB

    • MD5

      e1205ef15da2dbecb57b40ce43abe0f8

    • SHA1

      8525f7a7218923302f97f4eb3865a1e20c271521

    • SHA256

      a5f9efbd8eb8dbadaead5328b9e1f3ace32e1b92f2772048cac6d455b8810d4c

    • SHA512

      d963263077611a27a663a97853cba3bb1031f4ba051129f08b2bb702b1a4e7b5e9e701cf08032b0c5d4fe4247bc18978b159e8d4900d3f3c0f392eb80d4551eb

MITRE ATT&CK Matrix

Tasks