General

  • Target

    1916-57-0x00000000007D0000-0x00000000007F2000-memory.dmp

  • Size

    136KB

  • Sample

    220916-qamhlsfha5

  • MD5

    3e3594b84b61e8efa1663ef22e6233a4

  • SHA1

    875abe53ce26d93de12263488b8b706ebe8e1f4f

  • SHA256

    76a9768dd0672782e37489fd83569c8607dc706da99886679367b38820a2bf1c

  • SHA512

    9c09d93ff641c095c55d9ae4add1ac9466f35f7eeb2c6176d7858767786a61812ef8bc4aeda8ca9ff411679d85d7ffe8737c9dfd8b7b2cfd7c703bdc36af7c43

  • SSDEEP

    1536:mpUbsRa3mqrICJCOghbSn1NgJ+uc97OyBAgcTJ0n0FH9IOcnToIfZsH0ad7C1:m67Wo2/bSzQ+uy6qAfJi013wTBfZqQ

Score
10/10

Malware Config

Extracted

Family

qakbot

Version

403.892

Botnet

BB

Campaign

1663241231

C2

81.131.161.131:2078

217.165.85.223:993

37.210.148.30:995

200.161.62.126:32101

78.100.225.34:2222

119.82.111.158:443

66.181.164.43:443

134.35.13.45:443

193.3.19.37:443

99.232.140.205:2222

197.94.210.133:443

87.243.113.104:995

84.38.133.191:443

14.184.97.67:443

123.240.131.1:443

194.166.207.160:995

78.168.87.170:2222

180.180.131.95:443

41.99.21.248:443

190.44.40.48:995

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      1916-57-0x00000000007D0000-0x00000000007F2000-memory.dmp

    • Size

      136KB

    • MD5

      3e3594b84b61e8efa1663ef22e6233a4

    • SHA1

      875abe53ce26d93de12263488b8b706ebe8e1f4f

    • SHA256

      76a9768dd0672782e37489fd83569c8607dc706da99886679367b38820a2bf1c

    • SHA512

      9c09d93ff641c095c55d9ae4add1ac9466f35f7eeb2c6176d7858767786a61812ef8bc4aeda8ca9ff411679d85d7ffe8737c9dfd8b7b2cfd7c703bdc36af7c43

    • SSDEEP

      1536:mpUbsRa3mqrICJCOghbSn1NgJ+uc97OyBAgcTJ0n0FH9IOcnToIfZsH0ad7C1:m67Wo2/bSzQ+uy6qAfJi013wTBfZqQ

    Score
    1/10

MITRE ATT&CK Matrix

Tasks