General

  • Target

    resemblance.tmp

  • Size

    691KB

  • Sample

    221124-vwer4shc33

  • MD5

    0cffee80be59c6316a7132446b0da699

  • SHA1

    80f524f04ef866cbc871b55f3d7e5786074671a4

  • SHA256

    8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274

  • SHA512

    ff4d88e5151379cc8429a6e989768788fbb32fa44a954e02ec04f4e46a2ec9fecdccea34ffb7775b7f202275cb61edfdffdf4c9c1b5899885c7bc5df8eb1f469

  • SSDEEP

    12288:sjGfBl7YUWlaVxbYUGOpGPq1Tu/VxdZlUP9Xq4F/9:sjk1W8wWpD9u/VLM9Xq4n

Malware Config

Extracted

Family

qakbot

Version

404.30

Botnet

BB06

Campaign

1668683197

C2

23.240.47.58:995

12.172.173.82:465

91.169.12.198:32100

94.63.65.146:443

80.13.179.151:2222

64.207.237.118:443

24.206.27.39:443

83.114.60.6:2222

86.171.75.63:443

86.195.32.149:2222

170.253.25.35:443

92.185.204.18:2078

157.231.42.190:995

170.249.59.153:443

174.101.111.4:443

116.74.163.152:443

76.80.180.154:995

180.151.104.143:443

86.130.9.167:2222

86.99.15.243:2222

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      resemblance.tmp

    • Size

      691KB

    • MD5

      0cffee80be59c6316a7132446b0da699

    • SHA1

      80f524f04ef866cbc871b55f3d7e5786074671a4

    • SHA256

      8ca16991684f7384c12b6622b8d1bcd23bc27f186f499c2059770ddd3031f274

    • SHA512

      ff4d88e5151379cc8429a6e989768788fbb32fa44a954e02ec04f4e46a2ec9fecdccea34ffb7775b7f202275cb61edfdffdf4c9c1b5899885c7bc5df8eb1f469

    • SSDEEP

      12288:sjGfBl7YUWlaVxbYUGOpGPq1Tu/VxdZlUP9Xq4F/9:sjk1W8wWpD9u/VLM9Xq4n

MITRE ATT&CK Matrix

Tasks