General

  • Target

    1116-58-0x00000000005B0000-0x00000000005D2000-memory.dmp

  • Size

    136KB

  • Sample

    220908-qzgnnaefg4

  • MD5

    9a46ab8b6c25eac0b3457613a4d2806d

  • SHA1

    9f94b196bef495744772b234b7cd7435f4aa2d63

  • SHA256

    19bfb4760ab745ef88c65a209504ebb8787a03f93456d4c21da3cf6e4642d91c

  • SHA512

    6455edb20eaeb5fe607be8ae25115a9e7e3cb1826f6eac1943f26f285f2f5128b9bb7eeb69847da429d7d8a6881985c02c8798380a02a69eed5c0c96d08b35fb

  • SSDEEP

    3072:uHc6WPn5YB2L9KRRcGUM/AdJJbd7ITBfVfcaFA+:8en5YB2LURRcG1IdJJd7ITBt0I5

Malware Config

Extracted

Family

qakbot

Version

403.858

Botnet

snow01

Campaign

1662453469

C2

200.161.62.126:32101

217.165.68.122:993

99.232.140.205:2222

81.131.161.131:2078

89.211.179.14:2222

186.64.87.202:443

197.94.210.133:443

193.3.19.37:443

37.210.148.30:995

200.100.55.252:32101

70.51.153.182:2222

120.150.218.241:995

173.189.167.21:995

24.139.72.117:443

104.34.212.7:32103

47.23.89.61:995

24.55.67.176:443

172.115.177.204:2222

217.165.77.134:995

24.178.196.158:2222

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      1116-58-0x00000000005B0000-0x00000000005D2000-memory.dmp

    • Size

      136KB

    • MD5

      9a46ab8b6c25eac0b3457613a4d2806d

    • SHA1

      9f94b196bef495744772b234b7cd7435f4aa2d63

    • SHA256

      19bfb4760ab745ef88c65a209504ebb8787a03f93456d4c21da3cf6e4642d91c

    • SHA512

      6455edb20eaeb5fe607be8ae25115a9e7e3cb1826f6eac1943f26f285f2f5128b9bb7eeb69847da429d7d8a6881985c02c8798380a02a69eed5c0c96d08b35fb

    • SSDEEP

      3072:uHc6WPn5YB2L9KRRcGUM/AdJJbd7ITBfVfcaFA+:8en5YB2LURRcG1IdJJd7ITBt0I5

    Score
    1/10

MITRE ATT&CK Matrix

Tasks