General

  • Target

    300123.gif

  • Size

    810KB

  • Sample

    230131-ss8vnsag31

  • MD5

    2300f270e6bc3b3f26ea3673687aef8d

  • SHA1

    17df458c08ff6c0d66d2158ab75b79132e2e00c5

  • SHA256

    934325a9f8bd9e620fbdd5264472da62f1b11bf32e3fb93853f929473033ed8b

  • SHA512

    9ff9015053eb5e9dd7063c783ed757e6f3281366a65fd67e6af139d1aa1a11501435c158af7c7cb3f02e1dc060a9b48d951d38b9468cc17562bb2cf44d270ffc

  • SSDEEP

    24576:sikjPg+4QceLhb6fMYaq4RPaOFmLjAjX:Bk0YBq6CjqX

Malware Config

Extracted

Family

qakbot

Version

404.432

Botnet

BB12

Campaign

1675161160

C2

114.143.176.234:443

88.126.94.4:50000

103.252.7.228:443

87.10.205.117:443

82.15.58.109:2222

72.80.7.6:995

90.162.45.154:2222

47.34.30.133:443

50.68.204.71:993

112.141.184.246:995

73.165.119.20:443

91.169.12.198:32100

173.18.126.3:443

87.56.238.53:443

85.241.180.94:443

12.172.173.82:50001

92.154.17.149:2222

103.42.86.246:995

12.172.173.82:990

91.254.132.23:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      300123.gif

    • Size

      810KB

    • MD5

      2300f270e6bc3b3f26ea3673687aef8d

    • SHA1

      17df458c08ff6c0d66d2158ab75b79132e2e00c5

    • SHA256

      934325a9f8bd9e620fbdd5264472da62f1b11bf32e3fb93853f929473033ed8b

    • SHA512

      9ff9015053eb5e9dd7063c783ed757e6f3281366a65fd67e6af139d1aa1a11501435c158af7c7cb3f02e1dc060a9b48d951d38b9468cc17562bb2cf44d270ffc

    • SSDEEP

      24576:sikjPg+4QceLhb6fMYaq4RPaOFmLjAjX:Bk0YBq6CjqX

MITRE ATT&CK Matrix

Tasks