General

  • Target

    300123.gif.dll

  • Size

    822KB

  • Sample

    230131-r75wwsgg67

  • MD5

    af9177a9842ebb006bcce95446e82e95

  • SHA1

    fddf8787c83f1eba44f564a3cf044b2cd4ba33a7

  • SHA256

    487ab4ef431390163568f0a89f4e8279d14717d7a9ced1ba45e34ad280b6b0de

  • SHA512

    32d94d4177b8f8dbe4cb2f883df0732ac74a34570b8c4f2cc6e5b73368f80c3f54cb733dedd1697940b12296b275c4cd89869abcbc97c41ae16a138bc6b9e156

  • SSDEEP

    24576:sikjPg+4QceLhb6fMYaq4RPaOFm0jAjX:Bk0YBq6tjqX

Malware Config

Extracted

Family

qakbot

Version

404.432

Botnet

BB12

Campaign

1675161160

C2

114.143.176.234:443

88.126.94.4:50000

103.252.7.228:443

87.10.205.117:443

82.15.58.109:2222

72.80.7.6:995

90.162.45.154:2222

47.34.30.133:443

50.68.204.71:993

112.141.184.246:995

73.165.119.20:443

91.169.12.198:32100

173.18.126.3:443

87.56.238.53:443

85.241.180.94:443

12.172.173.82:50001

92.154.17.149:2222

103.42.86.246:995

12.172.173.82:990

91.254.132.23:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      300123.gif.dll

    • Size

      822KB

    • MD5

      af9177a9842ebb006bcce95446e82e95

    • SHA1

      fddf8787c83f1eba44f564a3cf044b2cd4ba33a7

    • SHA256

      487ab4ef431390163568f0a89f4e8279d14717d7a9ced1ba45e34ad280b6b0de

    • SHA512

      32d94d4177b8f8dbe4cb2f883df0732ac74a34570b8c4f2cc6e5b73368f80c3f54cb733dedd1697940b12296b275c4cd89869abcbc97c41ae16a138bc6b9e156

    • SSDEEP

      24576:sikjPg+4QceLhb6fMYaq4RPaOFm0jAjX:Bk0YBq6tjqX

MITRE ATT&CK Matrix

Tasks