General

  • Target

    300123.bin

  • Size

    820KB

  • Sample

    230131-r3z5vaaf4w

  • MD5

    141992d71b50e3231293b4313c8073b4

  • SHA1

    e03254745bf2353921bb8cc1550e3483970fcf85

  • SHA256

    c5034f838bbe7a6dd75d075cde1eb09cdb1c496c99d0d29e4ae91026226773a3

  • SHA512

    c255c920c81cf2b927449eeece088ff11b98ec0a0f794f7b58ba014720aa1816b4329a9a8eb4a0c1c880626e092b302fe18d03623744cb6fb059c3075370914d

  • SSDEEP

    24576:sikjPg+4QceLhb6fMYaq4RPaOFmCjAjX:Bk0YBq6vjqX

Malware Config

Extracted

Family

qakbot

Version

404.432

Botnet

BB12

Campaign

1675161160

C2

114.143.176.234:443

88.126.94.4:50000

103.252.7.228:443

87.10.205.117:443

82.15.58.109:2222

72.80.7.6:995

90.162.45.154:2222

47.34.30.133:443

50.68.204.71:993

112.141.184.246:995

73.165.119.20:443

91.169.12.198:32100

173.18.126.3:443

87.56.238.53:443

85.241.180.94:443

12.172.173.82:50001

92.154.17.149:2222

103.42.86.246:995

12.172.173.82:990

91.254.132.23:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      300123.bin

    • Size

      820KB

    • MD5

      141992d71b50e3231293b4313c8073b4

    • SHA1

      e03254745bf2353921bb8cc1550e3483970fcf85

    • SHA256

      c5034f838bbe7a6dd75d075cde1eb09cdb1c496c99d0d29e4ae91026226773a3

    • SHA512

      c255c920c81cf2b927449eeece088ff11b98ec0a0f794f7b58ba014720aa1816b4329a9a8eb4a0c1c880626e092b302fe18d03623744cb6fb059c3075370914d

    • SSDEEP

      24576:sikjPg+4QceLhb6fMYaq4RPaOFmCjAjX:Bk0YBq6vjqX

MITRE ATT&CK Matrix

Tasks