General

  • Target
    Marechal.dll
  • Size 1.9MB
  • Sample230620-lr98sabc24
  • SHA256 e7bb9d7465c2b26925434980de273231481d1cc532530201d65ba834e3f1953c
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • qakbot

Version
  • 404.1382

Botnet
  • BB33

Campaign
  • 1687242247

C2
  • 201.171.159.196:443

  • 192.252.166.24:80

  • 176.44.123.169:995

  • 2.82.8.80:443

  • 81.150.169.174:2083

  • 74.12.147.68:2222

  • 86.248.228.57:2078

  • 70.160.67.203:443

  • 75.109.111.89:443

  • 88.126.94.4:50000

  • 70.28.50.223:3389

  • 223.166.13.95:995

  • 162.248.14.107:443

  • 70.28.50.223:32100

  • 84.35.26.14:995

  • 12.172.173.82:995

  • 183.87.163.165:443

  • 92.186.69.229:2222

  • 12.172.173.82:993

  • 174.4.89.3:443

Targets

    • Target
      Marechal.dll
    • Size 1.9MB
    • SHA256 e7bb9d7465c2b26925434980de273231481d1cc532530201d65ba834e3f1953c
    • MD5 SHA1 SHA512 SSDEEP

MITRE ATT&CK Matrix

Tasks