General

  • Target

    412b98bda062b223d634a60a95ca9c8424aaee3dfbae36581a6ba4a849411fc4

  • Size

    531KB

  • Sample

    220627-lacaesaahj

  • MD5

    b56535917631a3bf2a179ecb9189b504

  • SHA1

    c6ffa50529fef595f3fcfb810cb3cb6774976454

  • SHA256

    17cbaf9cc670e0d5502e4f5b412063e377af2e7445bbd2c7e3d0eaad4f8de2a7

  • SHA512

    2cc6c4964f645346a59c8154131df701683b11a24b374dcbf0ce0e91486829d7c85a22908d0e0c185ffba5ef11c35ed4d9f73a041e75a5c898f2b7216d325c02

Malware Config

Extracted

Family

qakbot

Version

403.780

Botnet

AA

Campaign

1655971687

C2

38.70.253.226:2222

47.23.89.60:993

120.150.218.241:995

117.248.109.38:21

37.34.253.233:443

86.132.14.70:2078

111.125.245.116:995

217.165.85.191:993

176.45.232.204:995

5.32.41.45:443

93.48.80.198:995

100.38.242.113:995

94.59.252.166:2222

74.14.5.179:2222

71.13.93.154:2222

193.253.44.249:2222

108.60.213.141:443

45.241.231.78:993

217.128.122.65:2222

40.134.246.185:995

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      412b98bda062b223d634a60a95ca9c8424aaee3dfbae36581a6ba4a849411fc4

    • Size

      1.0MB

    • MD5

      d2d76a48845f84e8fc9abe44d4ea72e5

    • SHA1

      24ff955023e052c14a4981b2ccf85d6050e5ec84

    • SHA256

      412b98bda062b223d634a60a95ca9c8424aaee3dfbae36581a6ba4a849411fc4

    • SHA512

      aa6f78639767c5ece44f26e1f72f5dca940a3e3fbb1f1d484c69ac0209bc85f5aa93cb2f4491b645b84d928de22416148468294e3d0623b2cb50598c6b0005d7

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Tasks