General

  • Target

    5c0289c750aaa596d9b87315b0fefba8cfcd2a3d0e2d820efc8c1dff94ce77a7

  • Size

    364KB

  • Sample

    220627-kk55tahhej

  • MD5

    445b170118891f9e4a3ec4d87252e6f9

  • SHA1

    23ec1918880e12335402804e7935fa86766df983

  • SHA256

    779b0016aeb24e00b5ca3282434932fbab38c53061ed49d49e6ee5a6146f027b

  • SHA512

    540c06916033ff2c59e60d5a1debf46331400a79d2d51e2aa9daf8eee1d82a5add9e982a8b6983af3baad67045af6be3b21273ad912f86f47b2107c469826ab5

Malware Config

Extracted

Family

qakbot

Version

403.780

Botnet

AA

Campaign

1656051427

C2

217.128.122.65:2222

24.43.99.75:443

67.209.195.198:443

208.107.221.224:443

70.46.220.114:443

32.221.224.140:995

88.241.122.55:443

186.90.153.162:2222

148.64.96.100:443

197.87.182.93:443

39.44.30.209:995

67.165.206.193:993

118.161.2.13:995

111.125.245.116:995

104.34.212.7:32103

86.200.151.188:2222

41.228.22.180:443

94.59.15.180:2222

24.178.196.158:2222

182.191.92.203:995

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      5c0289c750aaa596d9b87315b0fefba8cfcd2a3d0e2d820efc8c1dff94ce77a7

    • Size

      719KB

    • MD5

      e004d073b16a82a2eb51d88cc48d53bb

    • SHA1

      81cbcb2dfe8815c3d410c28acae2079cfeb4bdea

    • SHA256

      5c0289c750aaa596d9b87315b0fefba8cfcd2a3d0e2d820efc8c1dff94ce77a7

    • SHA512

      e12a91c97ba334a21f5e83565bdabe093463273bd50e939070ba6d6b917798e792f588130198b6371c1c562eea81081c291884610c4b9a28c13d1e890b6c1a7a

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Tasks