General

  • Target

    1792-58-0x0000000001C50000-0x0000000001C7A000-memory.dmp

  • Size

    168KB

  • Sample

    221117-s97zpsag9s

  • MD5

    ed464e79e83b3540e397f78abdfd7418

  • SHA1

    11d90da106a4d2f2e8e32a4c0b00198a1dd0ec98

  • SHA256

    85333aab937620d869b8e88277fc77abae010eb064cb78dd32ebfcf54f0cd12f

  • SHA512

    c4199ee321d34680577e1579fa29be5c2795dcb09a243ae04967578ce0a0be59ab6ee6b6d8903190a74c30524d3a628105f9452f65eadfbafd66f7c169c72d73

  • SSDEEP

    3072:C4Sk4N11yy2rzt2cRC1D4AkJgy/GW4TBfZnva83T4O/ya:uryrfcUC1DdkJp/z4TBRS83T7/

Score
10/10

Malware Config

Extracted

Family

qakbot

Version

404.30

Botnet

BB06

Campaign

1668683197

C2

23.240.47.58:995

12.172.173.82:465

91.169.12.198:32100

94.63.65.146:443

80.13.179.151:2222

64.207.237.118:443

24.206.27.39:443

83.114.60.6:2222

86.171.75.63:443

86.195.32.149:2222

170.253.25.35:443

92.185.204.18:2078

157.231.42.190:995

170.249.59.153:443

174.101.111.4:443

116.74.163.152:443

76.80.180.154:995

180.151.104.143:443

86.130.9.167:2222

86.99.15.243:2222

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      1792-58-0x0000000001C50000-0x0000000001C7A000-memory.dmp

    • Size

      168KB

    • MD5

      ed464e79e83b3540e397f78abdfd7418

    • SHA1

      11d90da106a4d2f2e8e32a4c0b00198a1dd0ec98

    • SHA256

      85333aab937620d869b8e88277fc77abae010eb064cb78dd32ebfcf54f0cd12f

    • SHA512

      c4199ee321d34680577e1579fa29be5c2795dcb09a243ae04967578ce0a0be59ab6ee6b6d8903190a74c30524d3a628105f9452f65eadfbafd66f7c169c72d73

    • SSDEEP

      3072:C4Sk4N11yy2rzt2cRC1D4AkJgy/GW4TBfZnva83T4O/ya:uryrfcUC1DdkJp/z4TBRS83T7/

    Score
    3/10

MITRE ATT&CK Matrix

Tasks