General

  • Target

    1112-58-0x00000000008E0000-0x0000000000902000-memory.dmp

  • Size

    136KB

  • Sample

    220908-q962asbhdl

  • MD5

    3df21ba60801472caafa71c3632035e5

  • SHA1

    d713b0e53915ef7f6488eee219a69ec192368c92

  • SHA256

    fee6225d025407a4ad4b3910112d41fb39d712e770eb842beb44273efd63d70e

  • SHA512

    6ade7589cbb616b79f8d71825d4a58fcd99e89871ddd813aef1fc20be12a669df67e49aabf02b88c70df6d881fa53a660a4ca611c87537aaf907dcaccf425453

  • SSDEEP

    3072:KJJfPnrN866+/5/HZqKAHJo+H9ITBfKw6YaFAa:K3nrN81+/5/HQfHJlH9ITBVVIV

Malware Config

Extracted

Family

qakbot

Version

403.858

Botnet

snow01

Campaign

1662453469

C2

200.161.62.126:32101

217.165.68.122:993

99.232.140.205:2222

81.131.161.131:2078

89.211.179.14:2222

186.64.87.202:443

197.94.210.133:443

193.3.19.37:443

37.210.148.30:995

200.100.55.252:32101

70.51.153.182:2222

120.150.218.241:995

173.189.167.21:995

24.139.72.117:443

104.34.212.7:32103

47.23.89.61:995

24.55.67.176:443

172.115.177.204:2222

217.165.77.134:995

24.178.196.158:2222

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      1112-58-0x00000000008E0000-0x0000000000902000-memory.dmp

    • Size

      136KB

    • MD5

      3df21ba60801472caafa71c3632035e5

    • SHA1

      d713b0e53915ef7f6488eee219a69ec192368c92

    • SHA256

      fee6225d025407a4ad4b3910112d41fb39d712e770eb842beb44273efd63d70e

    • SHA512

      6ade7589cbb616b79f8d71825d4a58fcd99e89871ddd813aef1fc20be12a669df67e49aabf02b88c70df6d881fa53a660a4ca611c87537aaf907dcaccf425453

    • SSDEEP

      3072:KJJfPnrN866+/5/HZqKAHJo+H9ITBfKw6YaFAa:K3nrN81+/5/HQfHJlH9ITBVVIV

    Score
    1/10

MITRE ATT&CK Matrix

Tasks