General

  • Target

    mole.temp

  • Size

    490KB

  • Sample

    221121-t97jlshh23

  • MD5

    f6d6dc18fcd618ca9e058edc1b8ba83d

  • SHA1

    34af27a7631257bd758bbedcee4b9603d4edbef7

  • SHA256

    94eca9416959a810b8a32207460879706b7d85ecd1e12eea228deeeef19bf2e0

  • SHA512

    1afeff82a74dc6961171fdf025567383e50add1c0abadbd57087e8f81cca753acbe1a97ca92f19b1128708da0ea98329f37439c41c9ac231db7cfdb1c13d787b

  • SSDEEP

    6144:GIZQLN2lkgFJUdgAPJgwEpPWD44TIXMUFOvctTWzpbTNEh6BgFJ+twd737Kn:GSlkcAPJr4WhT7iwz4agFwid7e

Malware Config

Extracted

Family

qakbot

Version

404.30

Botnet

BB07

Campaign

1669024152

C2

69.119.123.159:2222

197.148.17.17:2078

174.104.184.149:443

12.172.173.82:995

91.68.227.219:443

85.241.180.94:443

83.7.53.150:443

213.22.188.57:2222

71.46.234.170:443

190.75.150.58:2222

86.98.15.100:995

89.115.196.99:443

83.31.254.67:2222

46.162.109.183:443

2.84.98.228:2222

78.69.251.252:2222

12.172.173.82:465

75.143.236.149:443

47.229.96.60:443

80.121.8.212:995

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      mole.temp

    • Size

      490KB

    • MD5

      f6d6dc18fcd618ca9e058edc1b8ba83d

    • SHA1

      34af27a7631257bd758bbedcee4b9603d4edbef7

    • SHA256

      94eca9416959a810b8a32207460879706b7d85ecd1e12eea228deeeef19bf2e0

    • SHA512

      1afeff82a74dc6961171fdf025567383e50add1c0abadbd57087e8f81cca753acbe1a97ca92f19b1128708da0ea98329f37439c41c9ac231db7cfdb1c13d787b

    • SSDEEP

      6144:GIZQLN2lkgFJUdgAPJgwEpPWD44TIXMUFOvctTWzpbTNEh6BgFJ+twd737Kn:GSlkcAPJr4WhT7iwz4agFwid7e

MITRE ATT&CK Matrix

Tasks