General

  • Target

    430000.dll

  • Size

    130KB

  • Sample

    230406-v793dsgb3x

  • MD5

    f614498d0e00be7207714bf6de2cf6c1

  • SHA1

    afb2cde286628e62ed43db9149e0b93ac27d6866

  • SHA256

    1a9018c8a743f206879d99651535a624a9dc56e578666c3e868c5991603da0f7

  • SHA512

    1bedfdf52b578a3204cbc0ec2927632d46a2437ae26e1d870833d82730e61dd1327cc7476318d67ee6401fbaf47c43b7f88f159f0f6dbaf3adbcd3afae63070d

  • SSDEEP

    3072:Y1CGk7wnQpPYn+/lTS15AJJv6VVHU8TBff4Bzho:YYGkC6QnclaSJJCVVHU8TB349

Malware Config

Extracted

Family

qakbot

Version

404.909

Botnet

BB22

Campaign

1680772777

C2

83.77.208.166:2222

47.205.25.170:443

12.172.173.82:995

24.236.90.196:2078

75.109.111.89:443

45.50.233.214:443

86.209.8.236:2222

92.154.17.149:2222

59.153.96.4:443

91.82.133.190:443

197.92.131.255:443

103.42.86.42:995

12.172.173.82:21

73.36.196.11:443

77.126.11.114:443

103.140.174.20:2222

12.172.173.82:465

119.82.123.160:443

116.72.250.18:443

109.50.143.218:2222

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      430000.dll

    • Size

      130KB

    • MD5

      f614498d0e00be7207714bf6de2cf6c1

    • SHA1

      afb2cde286628e62ed43db9149e0b93ac27d6866

    • SHA256

      1a9018c8a743f206879d99651535a624a9dc56e578666c3e868c5991603da0f7

    • SHA512

      1bedfdf52b578a3204cbc0ec2927632d46a2437ae26e1d870833d82730e61dd1327cc7476318d67ee6401fbaf47c43b7f88f159f0f6dbaf3adbcd3afae63070d

    • SSDEEP

      3072:Y1CGk7wnQpPYn+/lTS15AJJv6VVHU8TBff4Bzho:YYGkC6QnclaSJJCVVHU8TB349

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Remote System Discovery

1
T1018

Tasks