General

  • Target

    1680-97-0x0000000000250000-0x000000000027A000-memory.dmp

  • Size

    168KB

  • Sample

    221205-vz4weadg3v

  • MD5

    95d73563c8429ab1201c3f5c475cf53a

  • SHA1

    18c7a0ff06d14ed2799ba5d92254334f14edb2ae

  • SHA256

    6004e7bce21903f5c8b064b0e6a7bd83a68e52740879e04b6863983267150777

  • SHA512

    daea97845543ce04ddd60ecbb0d6a45f222d2e1c58406ac9e07f655b7b164e5b6465cf2c1d8e0afac55800fd644b91ab521dd1634b3943e6da33354dd230b8b7

  • SSDEEP

    3072:ogSPueeAMUSf/vGctAcJTRFg3TBfpA5O/yaGv:pzdDfXGcucJVFg3TBhAQ/

Score
10/10

Malware Config

Extracted

Family

qakbot

Version

404.46

Botnet

BB09

Campaign

1670238005

C2

76.100.159.250:443

66.191.69.18:995

186.64.67.9:443

50.90.249.161:443

109.150.179.158:2222

92.149.205.238:2222

86.165.15.180:2222

41.44.19.36:995

78.17.157.5:443

173.18.126.3:443

75.99.125.235:2222

172.90.139.138:2222

27.99.45.237:2222

91.68.227.219:443

12.172.173.82:993

103.144.201.62:2078

12.172.173.82:990

173.239.94.212:443

91.169.12.198:32100

24.64.114.59:2222

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      1680-97-0x0000000000250000-0x000000000027A000-memory.dmp

    • Size

      168KB

    • MD5

      95d73563c8429ab1201c3f5c475cf53a

    • SHA1

      18c7a0ff06d14ed2799ba5d92254334f14edb2ae

    • SHA256

      6004e7bce21903f5c8b064b0e6a7bd83a68e52740879e04b6863983267150777

    • SHA512

      daea97845543ce04ddd60ecbb0d6a45f222d2e1c58406ac9e07f655b7b164e5b6465cf2c1d8e0afac55800fd644b91ab521dd1634b3943e6da33354dd230b8b7

    • SSDEEP

      3072:ogSPueeAMUSf/vGctAcJTRFg3TBfpA5O/yaGv:pzdDfXGcucJVFg3TBhAQ/

    Score
    3/10

MITRE ATT&CK Matrix

Tasks