General

  • Target

    b1b805c4d99c57a4e85ec8b640741db28550ec99ac173777fb4c53ce794d55fa.dll

  • Size

    133KB

  • Sample

    230201-anyj2aba88

  • MD5

    a12dd4324bbf1129d9fae1b3d1e6b9ca

  • SHA1

    302b9664c8f7804a9f2085ce7d452796c6658017

  • SHA256

    b1b805c4d99c57a4e85ec8b640741db28550ec99ac173777fb4c53ce794d55fa

  • SHA512

    2be1d31bb9f709426930c26dce34b3cd125f2ee367ffbc85a726653f39166fa6ed5ca6d660f4056d62c1b6ae21a6cab4d1c699b4500538089c52dc068d15aead

  • SSDEEP

    3072:vySCR7EjSC039FFClajmDUUAfJ9UnUHTBfP/G4:vQEjSC0NTCZDUBfJ6nUHTBH/G

Score
10/10

Malware Config

Extracted

Family

qakbot

Version

404.432

Botnet

BB12

Campaign

1675161116

C2

103.252.7.228:443

87.10.205.117:443

82.15.58.109:2222

72.80.7.6:995

90.162.45.154:2222

47.34.30.133:443

50.68.204.71:993

112.141.184.246:995

73.165.119.20:443

91.169.12.198:32100

173.18.126.3:443

87.56.238.53:443

85.241.180.94:443

12.172.173.82:50001

92.154.17.149:2222

103.42.86.246:995

12.172.173.82:990

91.254.132.23:443

121.121.100.207:995

74.92.243.113:50000

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      b1b805c4d99c57a4e85ec8b640741db28550ec99ac173777fb4c53ce794d55fa.dll

    • Size

      133KB

    • MD5

      a12dd4324bbf1129d9fae1b3d1e6b9ca

    • SHA1

      302b9664c8f7804a9f2085ce7d452796c6658017

    • SHA256

      b1b805c4d99c57a4e85ec8b640741db28550ec99ac173777fb4c53ce794d55fa

    • SHA512

      2be1d31bb9f709426930c26dce34b3cd125f2ee367ffbc85a726653f39166fa6ed5ca6d660f4056d62c1b6ae21a6cab4d1c699b4500538089c52dc068d15aead

    • SSDEEP

      3072:vySCR7EjSC039FFClajmDUUAfJ9UnUHTBfP/G4:vQEjSC0NTCZDUBfJ6nUHTBH/G

    Score
    7/10
    • Loads dropped DLL

MITRE ATT&CK Matrix

Tasks