General

  • Target

    300123_.bin

  • Size

    827KB

  • Sample

    230131-sbh8paaf7t

  • MD5

    e1cf148743ee2c9e0e714ff651515a14

  • SHA1

    187b63ec7e2f63b079006a4cdbf5a4b5c9a43e4c

  • SHA256

    6db16197daf4dc5b424f97237fd7d11a2e8a69f30bacacff38e3445fbbd8bc09

  • SHA512

    4764bd910e5cb32bb83b54e6fd927b40aeebb0f24be53638ab824fcbfc600d3218e710509c7032586c42e4ae6304bfdfe2d1d69b3ead1118c0dafbbfcba2c5a3

  • SSDEEP

    24576:sikjPg+4QceLhb6fMYaq4RPaOFm2jAjX:Bk0YBq6PjqX

Malware Config

Extracted

Family

qakbot

Version

404.432

Botnet

BB12

Campaign

1675161160

C2

114.143.176.234:443

88.126.94.4:50000

103.252.7.228:443

87.10.205.117:443

82.15.58.109:2222

72.80.7.6:995

90.162.45.154:2222

47.34.30.133:443

50.68.204.71:993

112.141.184.246:995

73.165.119.20:443

91.169.12.198:32100

173.18.126.3:443

87.56.238.53:443

85.241.180.94:443

12.172.173.82:50001

92.154.17.149:2222

103.42.86.246:995

12.172.173.82:990

91.254.132.23:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      300123_.bin

    • Size

      827KB

    • MD5

      e1cf148743ee2c9e0e714ff651515a14

    • SHA1

      187b63ec7e2f63b079006a4cdbf5a4b5c9a43e4c

    • SHA256

      6db16197daf4dc5b424f97237fd7d11a2e8a69f30bacacff38e3445fbbd8bc09

    • SHA512

      4764bd910e5cb32bb83b54e6fd927b40aeebb0f24be53638ab824fcbfc600d3218e710509c7032586c42e4ae6304bfdfe2d1d69b3ead1118c0dafbbfcba2c5a3

    • SSDEEP

      24576:sikjPg+4QceLhb6fMYaq4RPaOFm2jAjX:Bk0YBq6PjqX

MITRE ATT&CK Matrix

Tasks