General

  • Target

    subsidized.tmp.dll

  • Size

    528KB

  • Sample

    221116-wgwmragb9y

  • MD5

    49f7cc6de9d7f780ba451cf87d7be0a4

  • SHA1

    b44e95c77c6a21d473d0a9d1e4dbec4e5874c848

  • SHA256

    40d050f531b57ebeef82d047638bd11795b203ac9132ff9203d1096843f68e44

  • SHA512

    adfa0a0853245ede9b7fa2a1eca63fc537404b9bb9d2cc24d171f18932ae1fb8ca6a199cef3d4166550a41fd4c254f2ee501f6d29f9ffc284624996b6332c7e0

  • SSDEEP

    12288:Sx4YGJ7FVsr0DUESxmf9TQGWCIQ1HvhL3iL/wXLK:Sx4Yk7A4DUESxs9MuI4vhL3tX

Malware Config

Extracted

Family

qakbot

Version

404.30

Botnet

BB06

Campaign

1668610672

C2

87.243.146.59:443

90.104.22.28:2222

200.93.14.206:2222

86.171.75.63:443

92.185.204.18:2078

86.225.214.138:2222

152.170.17.136:443

92.27.86.48:2222

76.80.180.154:995

71.31.101.183:443

91.254.215.167:443

73.22.121.210:443

87.202.101.164:50000

24.228.132.224:2222

70.121.198.103:2078

186.28.85.119:995

193.251.52.34:2222

98.211.64.94:443

172.117.139.142:995

70.51.153.72:2222

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Extracted

Family

qakbot

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      subsidized.tmp.dll

    • Size

      528KB

    • MD5

      49f7cc6de9d7f780ba451cf87d7be0a4

    • SHA1

      b44e95c77c6a21d473d0a9d1e4dbec4e5874c848

    • SHA256

      40d050f531b57ebeef82d047638bd11795b203ac9132ff9203d1096843f68e44

    • SHA512

      adfa0a0853245ede9b7fa2a1eca63fc537404b9bb9d2cc24d171f18932ae1fb8ca6a199cef3d4166550a41fd4c254f2ee501f6d29f9ffc284624996b6332c7e0

    • SSDEEP

      12288:Sx4YGJ7FVsr0DUESxmf9TQGWCIQ1HvhL3iL/wXLK:Sx4Yk7A4DUESxs9MuI4vhL3tX

MITRE ATT&CK Matrix

Tasks