General

  • Target

    tmpjk_10m61

  • Size

    621KB

  • Sample

    221117-hhcpdahg9x

  • MD5

    94f2193d53fdb77fdf85bb638abfb34d

  • SHA1

    19927996ec7e440d54eff215cfe207b8c804e4b6

  • SHA256

    0a6fed37f54e149b09fdee1852b68b82c301e7397199e9f5298fc6e22f71ad72

  • SHA512

    bf0c6b8a11b422b241d3c7231ccbd84435bcaafddc5553598a111f527a0aaff150f995769cbd97ccd19b896f854c2152e083aadd7601456edb05f0ff5e14c762

  • SSDEEP

    12288:+Wd5j2OjX3bnp68y92ckM2MLt0tcETKvnp1Rau4Vvqs9sjW:+W5jHr7cV2xTOpkVvxo

Malware Config

Extracted

Family

qakbot

Version

404.27

Botnet

BB06

Campaign

1668492308

C2

49.175.72.56:443

81.229.117.95:2222

47.41.154.250:443

69.133.162.35:443

84.35.26.14:995

68.47.128.161:443

156.217.219.147:995

87.65.160.87:995

174.101.111.4:443

82.127.174.33:2222

91.169.12.198:32100

24.28.121.122:443

157.231.42.190:995

90.89.95.158:2222

74.33.84.227:443

24.64.114.59:2222

80.13.179.151:2222

64.207.237.118:443

24.206.27.39:443

170.253.25.35:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      tmpjk_10m61

    • Size

      621KB

    • MD5

      94f2193d53fdb77fdf85bb638abfb34d

    • SHA1

      19927996ec7e440d54eff215cfe207b8c804e4b6

    • SHA256

      0a6fed37f54e149b09fdee1852b68b82c301e7397199e9f5298fc6e22f71ad72

    • SHA512

      bf0c6b8a11b422b241d3c7231ccbd84435bcaafddc5553598a111f527a0aaff150f995769cbd97ccd19b896f854c2152e083aadd7601456edb05f0ff5e14c762

    • SSDEEP

      12288:+Wd5j2OjX3bnp68y92ckM2MLt0tcETKvnp1Rau4Vvqs9sjW:+W5jHr7cV2xTOpkVvxo

MITRE ATT&CK Matrix

Tasks