General

  • Target

    1932-56-0x00000000004B0000-0x00000000004D2000-memory.dmp

  • Size

    136KB

  • Sample

    220915-sqxpmaddf8

  • MD5

    c47b12a9938251591412eb6bf6b77d72

  • SHA1

    9bf63a356f6f48792bb872117b775d0b542068de

  • SHA256

    7889ced971c1f79711eae1a160b54fd8f60a39670e5ee510fd86e2ea8366fbe9

  • SHA512

    3781d260940bfcb83b3eb47b5407e0fa010c7de5607b570343f7667e1f66186dda86ff11b86389d05018985968df04dc42e18850abd47a06e63f895ca39ab8f6

  • SSDEEP

    3072:6sphmPt6e24sgomOWRoAHJQ+dv88TBf1cI:JhmP0e24sg7tHJ5dU8TBtcI

Score
10/10

Malware Config

Extracted

Family

qakbot

Version

403.892

Botnet

BB

Campaign

1663241231

C2

81.131.161.131:2078

217.165.85.223:993

37.210.148.30:995

200.161.62.126:32101

78.100.225.34:2222

119.82.111.158:443

66.181.164.43:443

134.35.13.45:443

193.3.19.37:443

99.232.140.205:2222

197.94.210.133:443

87.243.113.104:995

84.38.133.191:443

14.184.97.67:443

123.240.131.1:443

194.166.207.160:995

78.168.87.170:2222

180.180.131.95:443

41.99.21.248:443

190.44.40.48:995

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      1932-56-0x00000000004B0000-0x00000000004D2000-memory.dmp

    • Size

      136KB

    • MD5

      c47b12a9938251591412eb6bf6b77d72

    • SHA1

      9bf63a356f6f48792bb872117b775d0b542068de

    • SHA256

      7889ced971c1f79711eae1a160b54fd8f60a39670e5ee510fd86e2ea8366fbe9

    • SHA512

      3781d260940bfcb83b3eb47b5407e0fa010c7de5607b570343f7667e1f66186dda86ff11b86389d05018985968df04dc42e18850abd47a06e63f895ca39ab8f6

    • SSDEEP

      3072:6sphmPt6e24sgomOWRoAHJQ+dv88TBf1cI:JhmP0e24sg7tHJ5dU8TBtcI

    Score
    1/10

MITRE ATT&CK Matrix

Tasks