General

  • Target

    6

  • Size

    640KB

  • Sample

    230807-kyx2csfg6t

  • MD5

    6111c1aab0fd38058924fd1970036c20

  • SHA1

    cfe33fb6dafe03505ec3f0e849ecab04205496b1

  • SHA256

    497949011ebb6455f9ef2c53dbdf167487d4ac8fb87cd6c46a8de5fa941c7e6a

  • SHA512

    7803232c7ce842f26995369c432660fa21bbb290fb8794185ebd02e5d27d80010758683253e5add24cf045db832b4715f7026085c7d3de15f57bfbf4fec2eb9d

  • SSDEEP

    12288:Vy51TwfaPPKIf9t7Ehp/DuWeTzmQ+EoHuHe/pEj:U/Tm8KI/yJuZzmT3HuHe/pEj

Malware Config

Extracted

Family

qakbot

Version

404.999

Botnet

notset

Campaign

1681806702

C2

67.10.2.240:995

172.248.42.122:443

12.172.173.82:21

76.86.31.59:443

24.139.11.137:443

74.66.134.24:443

86.178.33.125:2222

198.2.51.242:993

124.246.122.199:2222

50.68.204.71:995

12.172.173.82:465

184.182.66.109:443

105.184.209.7:995

100.6.31.96:443

139.226.47.229:995

175.156.65.126:2222

161.142.104.40:995

122.184.143.85:443

125.99.69.178:443

86.99.49.64:2222

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      6

    • Size

      640KB

    • MD5

      6111c1aab0fd38058924fd1970036c20

    • SHA1

      cfe33fb6dafe03505ec3f0e849ecab04205496b1

    • SHA256

      497949011ebb6455f9ef2c53dbdf167487d4ac8fb87cd6c46a8de5fa941c7e6a

    • SHA512

      7803232c7ce842f26995369c432660fa21bbb290fb8794185ebd02e5d27d80010758683253e5add24cf045db832b4715f7026085c7d3de15f57bfbf4fec2eb9d

    • SSDEEP

      12288:Vy51TwfaPPKIf9t7Ehp/DuWeTzmQ+EoHuHe/pEj:U/Tm8KI/yJuZzmT3HuHe/pEj

MITRE ATT&CK Enterprise v15

Tasks