General

  • Target
    fondest.tmp.dll
  • Size 497KB
  • Sample221207-qnysssfa47
  • SHA256 96d2f4131542e1b4a6e9bba0bf3807008cb8340e7d247b464fdbebe11031d9e2
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • qakbot

Version
  • 404.46

Botnet
  • BB09

Campaign
  • 1670238005

C2
  • 76.100.159.250:443

  • 66.191.69.18:995

  • 186.64.67.9:443

  • 50.90.249.161:443

  • 109.150.179.158:2222

  • 92.149.205.238:2222

  • 86.165.15.180:2222

  • 41.44.19.36:995

  • 78.17.157.5:443

  • 173.18.126.3:443

  • 75.99.125.235:2222

  • 172.90.139.138:2222

  • 27.99.45.237:2222

  • 91.68.227.219:443

  • 12.172.173.82:993

  • 103.144.201.62:2078

  • 12.172.173.82:990

  • 173.239.94.212:443

  • 91.169.12.198:32100

  • 24.64.114.59:2222

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target
      fondest.tmp.dll
    • Size 497KB
    • SHA256 96d2f4131542e1b4a6e9bba0bf3807008cb8340e7d247b464fdbebe11031d9e2
    • MD5 SHA1 SHA512 SSDEEP

MITRE ATT&CK Matrix

Tasks