General

  • Target

    a635c2a6c7e4b6b8d912c6aadd5b5d09c4ca9e499df6229901058d1deca4977e

  • Size

    377KB

  • Sample

    220912-vqwtfadfh8

  • MD5

    8cbe7a375c83265d6a4e92d19247e720

  • SHA1

    bfb1cc47548efd6c9930b0a41471d88b98c7a30b

  • SHA256

    a635c2a6c7e4b6b8d912c6aadd5b5d09c4ca9e499df6229901058d1deca4977e

  • SHA512

    a174335aaa75d19a2fb1123262cede24e6265ec4082ee1e7a7228d3efd81be7856e8158ab6ff44b1e94a43e946b91bfd7fe6d5e47c3bb13370df331fe42ad9cb

  • SSDEEP

    6144:INApvHrlpcZXPvegFFRvjdcq0GOAiIu/hdFcwHrT7Hxi+DOD/CROAWg2mkp5rJgR:Iszlp6XPvegFvr1rOl7OwLT7H5DOrC/0

Malware Config

Extracted

Family

qakbot

Version

403.868

Botnet

BB

Campaign

1662992461

C2

41.97.64.224:443

191.97.234.238:995

89.211.219.157:2222

193.3.19.37:443

70.51.137.118:2222

99.232.140.205:2222

175.110.231.67:443

196.92.172.24:8443

179.111.111.88:32101

134.35.11.110:443

84.38.133.191:443

102.188.100.131:995

197.94.210.133:443

200.161.62.126:32101

194.49.79.231:443

41.248.89.135:443

81.131.161.131:2078

86.98.156.176:993

37.210.148.30:995

81.214.220.237:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      a635c2a6c7e4b6b8d912c6aadd5b5d09c4ca9e499df6229901058d1deca4977e

    • Size

      377KB

    • MD5

      8cbe7a375c83265d6a4e92d19247e720

    • SHA1

      bfb1cc47548efd6c9930b0a41471d88b98c7a30b

    • SHA256

      a635c2a6c7e4b6b8d912c6aadd5b5d09c4ca9e499df6229901058d1deca4977e

    • SHA512

      a174335aaa75d19a2fb1123262cede24e6265ec4082ee1e7a7228d3efd81be7856e8158ab6ff44b1e94a43e946b91bfd7fe6d5e47c3bb13370df331fe42ad9cb

    • SSDEEP

      6144:INApvHrlpcZXPvegFFRvjdcq0GOAiIu/hdFcwHrT7Hxi+DOD/CROAWg2mkp5rJgR:Iszlp6XPvegFvr1rOl7OwLT7H5DOrC/0

MITRE ATT&CK Matrix

Tasks