General

  • Target

    1309.html

  • Size

    536KB

  • Sample

    220913-m8tg2abcar

  • MD5

    f724c9c1c66ffb25cfa2a1806cf5163c

  • SHA1

    1afebb477e4da1d476ae03795a2007863d5bba45

  • SHA256

    0fa902b9a3cd0299b79c427036ca2a356292c76c7a85da1312860db02486ab36

  • SHA512

    c4f72aba68dcb274383be28a4c36a3918168ffbe457501362fc6f2e7956ae79a55042c290a661d5bf48db60a756e5784c4b47e85ee1aaef17a3f68cc3f4e3d06

  • SSDEEP

    12288:OzxVoNEXfnRXaF0IsZQWkQsHipSzERvCey4CZfxz4um:UvoQfhE0IbRiLRq3bzp

Malware Config

Extracted

Family

qakbot

Version

403.862

Botnet

BB

Campaign

1663053455

C2

194.49.79.231:443

193.3.19.37:443

99.232.140.205:2222

47.146.182.110:443

84.38.133.191:443

191.97.234.238:995

37.210.148.30:995

64.207.215.69:443

200.161.62.126:32101

88.245.103.132:2222

86.98.156.176:993

175.110.231.67:443

78.100.254.17:2222

191.84.204.214:995

123.240.131.1:443

197.94.210.133:443

196.92.172.24:8443

186.50.245.74:995

70.51.132.197:2222

100.1.5.250:995

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      1309.html

    • Size

      536KB

    • MD5

      f724c9c1c66ffb25cfa2a1806cf5163c

    • SHA1

      1afebb477e4da1d476ae03795a2007863d5bba45

    • SHA256

      0fa902b9a3cd0299b79c427036ca2a356292c76c7a85da1312860db02486ab36

    • SHA512

      c4f72aba68dcb274383be28a4c36a3918168ffbe457501362fc6f2e7956ae79a55042c290a661d5bf48db60a756e5784c4b47e85ee1aaef17a3f68cc3f4e3d06

    • SSDEEP

      12288:OzxVoNEXfnRXaF0IsZQWkQsHipSzERvCey4CZfxz4um:UvoQfhE0IbRiLRq3bzp

MITRE ATT&CK Matrix

Tasks