General

  • Target

    Qt0pPfeBAM.gif

  • Size

    272KB

  • Sample

    230404-r86vksff97

  • MD5

    2c45b56697ae2a61d51c4d2ef1b22705

  • SHA1

    9df5f306cc3212ad618709c430dc4c2167610432

  • SHA256

    7dbd79c93609039ce20f9517c39d366cf9ef3603fef12f23082c9dafe0701265

  • SHA512

    810a492c6f668b5cace17c8de1f812da2d951c19b535260846264dd778baedfb26b7fc6edb1de8b33948b9752995c99bb6a9bb0751c668f9f23b38682550983f

  • SSDEEP

    6144:CRZ9z7LBQaooeAHxGNRYwQ5606dB9LSK7pb3Km6Pe2j:c7ruaooeAHQBdzmK79Km0

Malware Config

Extracted

Family

qakbot

Version

404.909

Botnet

BB22

Campaign

1680515593

C2

109.218.86.223:2222

78.130.215.67:443

70.112.206.5:443

12.172.173.82:50001

201.244.108.183:995

96.87.28.170:2222

76.80.180.154:993

95.60.243.24:995

87.202.101.164:50000

86.225.214.138:2222

74.66.134.24:443

72.203.216.98:2222

92.239.81.124:443

37.189.1.102:443

144.64.226.144:443

202.142.98.62:443

12.172.173.82:993

71.171.83.69:443

139.226.47.229:995

197.204.234.123:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      Qt0pPfeBAM.gif

    • Size

      272KB

    • MD5

      2c45b56697ae2a61d51c4d2ef1b22705

    • SHA1

      9df5f306cc3212ad618709c430dc4c2167610432

    • SHA256

      7dbd79c93609039ce20f9517c39d366cf9ef3603fef12f23082c9dafe0701265

    • SHA512

      810a492c6f668b5cace17c8de1f812da2d951c19b535260846264dd778baedfb26b7fc6edb1de8b33948b9752995c99bb6a9bb0751c668f9f23b38682550983f

    • SSDEEP

      6144:CRZ9z7LBQaooeAHxGNRYwQ5606dB9LSK7pb3Km6Pe2j:c7ruaooeAHQBdzmK79Km0

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Remote System Discovery

1
T1018

Tasks