Resubmissions

06/03/2023, 21:16

230306-z4zjpsed2v 10

06/03/2023, 21:13

230306-z2z3fseh49 1

06/03/2023, 21:10

230306-zz5vxsec81 1

06/03/2023, 21:09

230306-zzqq1aeh44 1

General

  • Target

    another_new_qbot.dll

  • Size

    592KB

  • Sample

    230306-z4zjpsed2v

  • MD5

    e273bf8c8df8d32d7bca05db9b155803

  • SHA1

    8b612f4f4a49e5cfa2057395fe3a0d0353f55b05

  • SHA256

    442420af4fc55164f5390ec68847bba4ae81d74534727975f47b7dd9d6dbdbe7

  • SHA512

    54dfdd1d5bd73abc897726c1b6bf89a2c7aa02c502564e264e57baea792235bd3757192bb1eddd848d43d0f49d9ecce4dd26cc871a4a20297f5b5857d3587443

  • SSDEEP

    12288:dt1VOakzj7hpQynG+6g1zJACP406bvcgW+oMfu+3:dt/xk37hyyzl1BP4ftoeu+3

Malware Config

Extracted

Family

qakbot

Version

404.66

Botnet

BB17

Campaign

1677490643

C2

12.172.173.82:20

66.191.69.18:995

186.64.87.213:443

108.190.203.42:995

50.68.204.71:443

136.232.184.134:995

103.42.86.110:995

174.118.36.28:443

75.143.236.149:443

72.203.216.98:2222

85.241.180.94:443

197.92.136.122:443

72.200.109.104:443

85.152.152.46:443

102.156.252.46:443

12.172.173.82:995

2.99.47.198:2222

172.248.42.122:443

70.77.116.233:443

162.248.14.107:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      another_new_qbot.dll

    • Size

      592KB

    • MD5

      e273bf8c8df8d32d7bca05db9b155803

    • SHA1

      8b612f4f4a49e5cfa2057395fe3a0d0353f55b05

    • SHA256

      442420af4fc55164f5390ec68847bba4ae81d74534727975f47b7dd9d6dbdbe7

    • SHA512

      54dfdd1d5bd73abc897726c1b6bf89a2c7aa02c502564e264e57baea792235bd3757192bb1eddd848d43d0f49d9ecce4dd26cc871a4a20297f5b5857d3587443

    • SSDEEP

      12288:dt1VOakzj7hpQynG+6g1zJACP406bvcgW+oMfu+3:dt/xk37hyyzl1BP4ftoeu+3

MITRE ATT&CK Matrix

Tasks