Resubmissions

28/03/2023, 01:39

230328-b2zvpagc77 10

16/03/2023, 15:21

230316-srj5xsbe35 3

General

  • Target

    borisTheTimeWaster

  • Size

    324KB

  • Sample

    230328-b2zvpagc77

  • MD5

    c0826228a9adb4d7954812ab057d73cd

  • SHA1

    b164340aaab397ae167006efe09c50b59d995fd0

  • SHA256

    86aa5515c1ea31365fee27c0be66c15650b1635966ebde47651b9ed0130c82e3

  • SHA512

    069c039ed78e2f90c34533bcb4052e1665cd862805e4e03ca763753e79ca1627aded3366f84dcbbaea91ec85e72220fc6f74f0b259279634ac1aeca2c65f3c0a

  • SSDEEP

    6144:1aaVzaA4R+aU/P/IvTDp3ZZ99GSrtMhsNW9BUW/aSFGMReiDhKRIbGjpDY0RppeX:O+aU/P/IvTDp3ZZ99RrtMU2GSYIajK8w

Malware Config

Extracted

Family

qakbot

Version

404.263

Botnet

BB19

Campaign

1678819882

C2

162.248.14.107:443

89.32.159.107:995

50.68.186.195:443

50.68.204.71:443

24.69.84.237:443

92.239.81.124:443

149.74.159.67:2222

176.202.46.81:443

2.82.8.80:443

72.203.216.98:2222

73.22.121.210:443

190.218.125.145:443

76.71.137.91:2222

81.158.112.20:2222

190.191.35.122:443

12.172.173.82:993

98.145.23.67:443

12.172.173.82:22

37.186.55.60:2222

73.161.176.218:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      borisTheTimeWaster

    • Size

      324KB

    • MD5

      c0826228a9adb4d7954812ab057d73cd

    • SHA1

      b164340aaab397ae167006efe09c50b59d995fd0

    • SHA256

      86aa5515c1ea31365fee27c0be66c15650b1635966ebde47651b9ed0130c82e3

    • SHA512

      069c039ed78e2f90c34533bcb4052e1665cd862805e4e03ca763753e79ca1627aded3366f84dcbbaea91ec85e72220fc6f74f0b259279634ac1aeca2c65f3c0a

    • SSDEEP

      6144:1aaVzaA4R+aU/P/IvTDp3ZZ99GSrtMhsNW9BUW/aSFGMReiDhKRIbGjpDY0RppeX:O+aU/P/IvTDp3ZZ99RrtMU2GSYIajK8w

MITRE ATT&CK Matrix

Tasks