General

  • Target

    02e25eab6e66675bffd2fe1401a8cbe45ec952d13cf6086ab0e59b19452e49f5

  • Size

    1.0MB

  • Sample

    220627-lef46sabbk

  • MD5

    b638d85678cfe7847a838907b0f69b94

  • SHA1

    d86898f675bb96059670b6d60ca4414db52ec8fc

  • SHA256

    02e25eab6e66675bffd2fe1401a8cbe45ec952d13cf6086ab0e59b19452e49f5

  • SHA512

    2f574db7dda322b814225d2057a0c478adc1f37b434a8513dbf2b9a3acfbdee26c68ec4a82c799ae619177e88c2bf7d48423273c62e4a72c6a1b9493dcc259e0

Malware Config

Extracted

Family

qakbot

Version

403.780

Botnet

AA

Campaign

1655971687

C2

38.70.253.226:2222

47.23.89.60:993

120.150.218.241:995

117.248.109.38:21

37.34.253.233:443

86.132.14.70:2078

111.125.245.116:995

217.165.85.191:993

176.45.232.204:995

5.32.41.45:443

93.48.80.198:995

100.38.242.113:995

94.59.252.166:2222

74.14.5.179:2222

71.13.93.154:2222

193.253.44.249:2222

108.60.213.141:443

45.241.231.78:993

217.128.122.65:2222

40.134.246.185:995

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      02e25eab6e66675bffd2fe1401a8cbe45ec952d13cf6086ab0e59b19452e49f5

    • Size

      1.0MB

    • MD5

      b638d85678cfe7847a838907b0f69b94

    • SHA1

      d86898f675bb96059670b6d60ca4414db52ec8fc

    • SHA256

      02e25eab6e66675bffd2fe1401a8cbe45ec952d13cf6086ab0e59b19452e49f5

    • SHA512

      2f574db7dda322b814225d2057a0c478adc1f37b434a8513dbf2b9a3acfbdee26c68ec4a82c799ae619177e88c2bf7d48423273c62e4a72c6a1b9493dcc259e0

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Tasks