General

  • Target

    devout.tmp

  • Size

    691KB

  • Sample

    221117-th25taah3t

  • MD5

    e4e5a9d7083b2c0cf5e7cfa71ff352f9

  • SHA1

    c4f67980cbde0283f443a5b98c5d0a471fbc9f59

  • SHA256

    fccd58f8cbe35db4d7107080deceeee644db5ede12963fc8782937d456cb6e1f

  • SHA512

    2fe9d9548953e8354f650541a5713fd32491998e5b6ecfb4fdb31a8daf88e6bbd4fcb5ce2bd46de3ae3423e601030746bf5c3833150a700edd2f82ea7939ff74

  • SSDEEP

    12288:sjGfBl+YUWlaVxbYUGOpGPq1Tu/VxdZlUP9Xq4F/9:sjkWW8wWpD9u/VLM9Xq4n

Malware Config

Extracted

Family

qakbot

Version

404.30

Botnet

BB06

Campaign

1668683197

C2

23.240.47.58:995

12.172.173.82:465

91.169.12.198:32100

94.63.65.146:443

80.13.179.151:2222

64.207.237.118:443

24.206.27.39:443

83.114.60.6:2222

86.171.75.63:443

86.195.32.149:2222

170.253.25.35:443

92.185.204.18:2078

157.231.42.190:995

170.249.59.153:443

174.101.111.4:443

116.74.163.152:443

76.80.180.154:995

180.151.104.143:443

86.130.9.167:2222

86.99.15.243:2222

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      devout.tmp

    • Size

      691KB

    • MD5

      e4e5a9d7083b2c0cf5e7cfa71ff352f9

    • SHA1

      c4f67980cbde0283f443a5b98c5d0a471fbc9f59

    • SHA256

      fccd58f8cbe35db4d7107080deceeee644db5ede12963fc8782937d456cb6e1f

    • SHA512

      2fe9d9548953e8354f650541a5713fd32491998e5b6ecfb4fdb31a8daf88e6bbd4fcb5ce2bd46de3ae3423e601030746bf5c3833150a700edd2f82ea7939ff74

    • SSDEEP

      12288:sjGfBl+YUWlaVxbYUGOpGPq1Tu/VxdZlUP9Xq4F/9:sjkWW8wWpD9u/VLM9Xq4n

MITRE ATT&CK Matrix

Tasks