General

  • Target
    x.zip
  • Size 244KB
  • Sample230307-zmtbcsbd7x
  • SHA256 d78b46dd7cf819431e921ad44bf2af3e14b838a8e94ed22a52d1cb74a06f5c9d
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • qakbot

Version
  • 404.222

Botnet
  • BB18

Campaign
  • 1678202783

C2
  • 47.32.78.150:443

  • 41.228.236.70:995

  • 72.203.216.98:2222

  • 105.109.157.34:990

  • 92.27.86.48:2222

  • 27.109.19.90:2078

  • 190.75.151.215:2222

  • 46.27.231.50:2078

  • 86.195.14.72:2222

  • 213.67.255.57:2222

  • 59.28.84.65:443

  • 79.67.165.149:995

  • 86.196.12.21:2222

  • 86.10.146.216:443

  • 92.154.17.149:2222

  • 92.154.45.81:2222

  • 50.86.217.209:443

  • 64.127.146.153:443

  • 86.202.48.142:2222

  • 70.51.133.238:2222

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target
      x.bat
    • Size 24B
    • SHA256 7ae33cf772296474b192ffa57970bb02d937582c5a40547e230ac2246ad5222f
    • MD5 SHA1 SHA512

MITRE ATT&CK Matrix

Tasks