Resubmissions

10-12-2022 04:29

221210-e4e5vaeh68 10

General

  • Target

    95d2d427251bd10427f078255981bee74ed39b9fde78e0e7f1fc5c7c38ad4a10

  • Size

    367KB

  • Sample

    221210-e4e5vaeh68

  • MD5

    9f59e640b72f0906d798fc11b4cf1d75

  • SHA1

    993f649c00e44528841ee002d7861391d032c7ae

  • SHA256

    95d2d427251bd10427f078255981bee74ed39b9fde78e0e7f1fc5c7c38ad4a10

  • SHA512

    54741643f8e57a7fd80fcf77193633d0b81246b085a196ba8bbac59fe60ecf513814c42e4342194ca2e8ce83284970d156acfb8a72f3dd70bd689efabff85b8a

  • SSDEEP

    6144:MK/s0aJWn8hdwefY5RAOgiLKefBv3n2JjiCk5c51kltCYEPxPTHmtkYoc0RV:jtMwuyJmkupiZiegLxLMKRV

Malware Config

Extracted

Family

qakbot

Version

404.30

Botnet

azd

Campaign

1670515354

C2

136.35.241.159:443

73.36.196.11:443

12.172.173.82:50001

190.24.45.24:995

193.253.100.236:2222

109.11.175.42:2222

92.8.190.211:2222

50.90.249.161:443

66.180.226.117:2222

201.208.139.250:2222

12.172.173.82:22

75.98.154.19:443

24.142.218.202:443

70.77.116.233:443

90.4.193.117:2222

24.69.87.61:443

98.147.155.235:443

83.213.192.136:443

176.133.4.230:995

71.31.101.183:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      95d2d427251bd10427f078255981bee74ed39b9fde78e0e7f1fc5c7c38ad4a10

    • Size

      367KB

    • MD5

      9f59e640b72f0906d798fc11b4cf1d75

    • SHA1

      993f649c00e44528841ee002d7861391d032c7ae

    • SHA256

      95d2d427251bd10427f078255981bee74ed39b9fde78e0e7f1fc5c7c38ad4a10

    • SHA512

      54741643f8e57a7fd80fcf77193633d0b81246b085a196ba8bbac59fe60ecf513814c42e4342194ca2e8ce83284970d156acfb8a72f3dd70bd689efabff85b8a

    • SSDEEP

      6144:MK/s0aJWn8hdwefY5RAOgiLKefBv3n2JjiCk5c51kltCYEPxPTHmtkYoc0RV:jtMwuyJmkupiZiegLxLMKRV

MITRE ATT&CK Matrix

Tasks