General

  • Target

    68b6903a83eebd93608c0fa3e7ea0366

  • Size

    327KB

  • Sample

    231219-vw3h6sehh2

  • MD5

    68b6903a83eebd93608c0fa3e7ea0366

  • SHA1

    6d9b87661d4b970c8e963e008b2adf7f753dd922

  • SHA256

    818c48f547c5cee6f63d30299c72d3e3aa1c9452088405e6d38c9816eed27c84

  • SHA512

    81b4bf5f429c84464ff8a924704119d0b3a37690104a49922317db59d562f1bd84aee59d2f254abb7e1a5629edf6b2c0bc84687c353f72fc88e5e041a106c547

  • SSDEEP

    6144:R60vBQcV0PPspp3Ke/QVCY9/Ob9ho+JVxfTPAKxu9755fu2v4ibqXtWXC19:R7A8TJPNPp84NibIt19

Malware Config

Extracted

Family

qakbot

Version

402.343

Botnet

tr

Campaign

1632730751

C2

95.77.223.148:443

47.22.148.6:443

89.101.97.139:443

27.223.92.142:995

120.151.47.189:443

136.232.34.70:443

120.150.218.241:995

185.250.148.74:443

181.118.183.94:443

140.82.49.12:443

67.165.206.193:993

103.148.120.144:443

71.74.12.34:443

76.25.142.196:443

73.151.236.31:443

173.21.10.71:2222

75.188.35.168:443

2.178.88.145:61202

71.80.168.245:443

45.46.53.140:2222

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      68b6903a83eebd93608c0fa3e7ea0366

    • Size

      327KB

    • MD5

      68b6903a83eebd93608c0fa3e7ea0366

    • SHA1

      6d9b87661d4b970c8e963e008b2adf7f753dd922

    • SHA256

      818c48f547c5cee6f63d30299c72d3e3aa1c9452088405e6d38c9816eed27c84

    • SHA512

      81b4bf5f429c84464ff8a924704119d0b3a37690104a49922317db59d562f1bd84aee59d2f254abb7e1a5629edf6b2c0bc84687c353f72fc88e5e041a106c547

    • SSDEEP

      6144:R60vBQcV0PPspp3Ke/QVCY9/Ob9ho+JVxfTPAKxu9755fu2v4ibqXtWXC19:R7A8TJPNPp84NibIt19

MITRE ATT&CK Enterprise v15

Tasks