General

  • Target
    x.zip
  • Size 226KB
  • Sample230306-swt6pacd8z
  • SHA256 0b89f369c3a282b5cd8fa79dddc467fd4c5f940b719752699c95c21d187ade1a
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • qakbot

Version
  • 404.74

Botnet
  • BB18

Campaign
  • 1678096419

C2
  • 27.99.34.220:2222

  • 2.99.47.198:2222

  • 93.147.235.8:443

  • 92.154.45.81:2222

  • 80.47.61.240:2222

  • 103.252.7.231:443

  • 198.2.51.242:993

  • 27.0.48.233:443

  • 176.142.207.63:443

  • 50.68.204.71:993

  • 86.250.10.160:2222

  • 202.186.177.88:443

  • 197.92.136.122:443

  • 90.104.22.28:2222

  • 69.119.123.159:2222

  • 174.4.89.3:443

  • 50.68.204.71:995

  • 49.245.82.178:2222

  • 85.241.180.94:443

  • 12.172.173.82:32101

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target
      x.bat
    • Size 24B
    • SHA256 ca9081c426cb9ef12be73a8a1c2d68c9e3eb9da9981b97b77ab7f4a3b3ab5382
    • MD5 SHA1 SHA512

MITRE ATT&CK Matrix

Tasks