General

  • Target

    979e30ec1e402ede4b222830f8f61818b3811acbbc670cf7b8790b2a70444cd0

  • Size

    540KB

  • Sample

    230612-yapxqsde37

  • MD5

    f361269dae9fe04123fcf35a99a627fb

  • SHA1

    4b93e061f777368fd71eb979bfc3358a07e7d814

  • SHA256

    979e30ec1e402ede4b222830f8f61818b3811acbbc670cf7b8790b2a70444cd0

  • SHA512

    90930e541617687e4faa2e48f3f9eb6e99b35caad0948e3c2ff2e825557b3efe83e6521d4cd841f8852017b1768c2e7e64431efcaa5cf2d3067109d298188c49

  • SSDEEP

    6144:X4dlVBTQZZ8G0rGyIENIFcmiNt19wJ+rD4bLU/GOMjaoz9VnRVt6YZNS6IO0pD1h:X4dp5GxGIID9sUHkaYhoYZNtIH3i2

Malware Config

Extracted

Family

qakbot

Version

404.476

Botnet

BB20

Campaign

1679552371

C2

86.225.214.138:2222

49.175.72.7:443

99.252.190.205:2222

102.158.63.36:443

92.186.69.229:2222

216.36.153.248:443

72.205.104.134:443

103.140.174.20:2222

98.145.23.67:443

124.246.122.199:2222

223.167.12.241:995

45.50.233.214:443

12.172.173.82:993

95.242.101.251:995

190.199.184.114:2222

2.82.8.80:443

104.35.24.154:443

184.176.35.223:2222

91.2.135.211:995

12.172.173.82:22

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      979e30ec1e402ede4b222830f8f61818b3811acbbc670cf7b8790b2a70444cd0

    • Size

      540KB

    • MD5

      f361269dae9fe04123fcf35a99a627fb

    • SHA1

      4b93e061f777368fd71eb979bfc3358a07e7d814

    • SHA256

      979e30ec1e402ede4b222830f8f61818b3811acbbc670cf7b8790b2a70444cd0

    • SHA512

      90930e541617687e4faa2e48f3f9eb6e99b35caad0948e3c2ff2e825557b3efe83e6521d4cd841f8852017b1768c2e7e64431efcaa5cf2d3067109d298188c49

    • SSDEEP

      6144:X4dlVBTQZZ8G0rGyIENIFcmiNt19wJ+rD4bLU/GOMjaoz9VnRVt6YZNS6IO0pD1h:X4dp5GxGIID9sUHkaYhoYZNtIH3i2

MITRE ATT&CK Matrix

Tasks