Resubmissions

27-04-2023 15:16

230427-snnnyagc97 3

30-03-2023 10:31

230330-mkr93adg3s 10

General

  • Target

    Beinked.Funkias.dll

  • Size

    556KB

  • Sample

    230330-mkr93adg3s

  • MD5

    c9ab1cd04e796fd7f084a1dd2d40cc2d

  • SHA1

    f05b2066a375a5c8d3dfc44d6097f577cd4f0255

  • SHA256

    d7608b8f684e7465599a4673fefa329de646e38d934dd79e592288c68720bcfa

  • SHA512

    ad974a30ac9e5915cb221db1c07fbaaa2d7b7f9a820841c62e887347abec76e8b626d97cfca6fb386a74f2f4bc89a4c484e46cc585770cd215e357eca0b13d9c

  • SSDEEP

    12288:0sqXe4DNX3lWA38yEDJQTiaQS8LztCYKH5t3XjMjDW:vqXeSNX3lWA3DEeCLcYKbIj

Malware Config

Extracted

Family

qakbot

Version

404.843

Botnet

BB21

Campaign

1680106938

C2

94.30.31.47:50000

72.88.245.71:443

136.35.241.159:443

74.92.243.115:50000

47.196.225.236:443

71.46.234.171:443

50.68.204.71:443

78.130.215.67:443

46.64.171.68:443

92.186.69.229:2222

68.173.170.110:8443

75.90.87.37:995

94.30.98.134:32100

24.236.90.196:2078

162.248.14.107:443

72.203.216.98:2222

67.219.197.94:443

78.69.251.252:2222

50.68.204.71:993

174.4.89.3:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      Beinked.Funkias.dll

    • Size

      556KB

    • MD5

      c9ab1cd04e796fd7f084a1dd2d40cc2d

    • SHA1

      f05b2066a375a5c8d3dfc44d6097f577cd4f0255

    • SHA256

      d7608b8f684e7465599a4673fefa329de646e38d934dd79e592288c68720bcfa

    • SHA512

      ad974a30ac9e5915cb221db1c07fbaaa2d7b7f9a820841c62e887347abec76e8b626d97cfca6fb386a74f2f4bc89a4c484e46cc585770cd215e357eca0b13d9c

    • SSDEEP

      12288:0sqXe4DNX3lWA38yEDJQTiaQS8LztCYKH5t3XjMjDW:vqXeSNX3lWA3DEeCLcYKbIj

MITRE ATT&CK Matrix

Tasks