General

  • Target

    300123.gif

  • Size

    802KB

  • Sample

    230131-sj4vcsgh25

  • MD5

    99c9d66f124b972e77ac223a712edf6e

  • SHA1

    5b7809bed4e39fd30293ac4049ac8f662af2e13f

  • SHA256

    a2cc505e0d7333b93b550980b4c2dcd450adcec6bd788522f606a69314587080

  • SHA512

    74c9a94f819126a508c9c1003fc7ad330b4ca181eb4e87664c3e91d530ff82d396bca4668c808fb64054ad57d1d77665bdffd8196c04345e446f5357ac08a63c

  • SSDEEP

    24576:sikjPg+4QceLhb6fMYaq4RPaOFmljAjX:Bk0YBq60jqX

Malware Config

Extracted

Family

qakbot

Version

404.432

Botnet

BB12

Campaign

1675161160

C2

114.143.176.234:443

88.126.94.4:50000

103.252.7.228:443

87.10.205.117:443

82.15.58.109:2222

72.80.7.6:995

90.162.45.154:2222

47.34.30.133:443

50.68.204.71:993

112.141.184.246:995

73.165.119.20:443

91.169.12.198:32100

173.18.126.3:443

87.56.238.53:443

85.241.180.94:443

12.172.173.82:50001

92.154.17.149:2222

103.42.86.246:995

12.172.173.82:990

91.254.132.23:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      300123.gif

    • Size

      802KB

    • MD5

      99c9d66f124b972e77ac223a712edf6e

    • SHA1

      5b7809bed4e39fd30293ac4049ac8f662af2e13f

    • SHA256

      a2cc505e0d7333b93b550980b4c2dcd450adcec6bd788522f606a69314587080

    • SHA512

      74c9a94f819126a508c9c1003fc7ad330b4ca181eb4e87664c3e91d530ff82d396bca4668c808fb64054ad57d1d77665bdffd8196c04345e446f5357ac08a63c

    • SSDEEP

      24576:sikjPg+4QceLhb6fMYaq4RPaOFmljAjX:Bk0YBq60jqX

MITRE ATT&CK Matrix

Tasks