General

  • Target

    a5bc0cd5d00f106956ae962aaddf631a4fc5fc4da24b36fa2518d1a9700a6f63

  • Size

    875KB

  • Sample

    240226-1wqr9shf8y

  • MD5

    35a7ed73981b4608879a56617e05d1e4

  • SHA1

    aa05bdd339e484d3e701084a069ffebc7a5c534d

  • SHA256

    a5bc0cd5d00f106956ae962aaddf631a4fc5fc4da24b36fa2518d1a9700a6f63

  • SHA512

    4d38ffda1c385d08c4e581597fb5813fa8fe41570418793b5df6ed1e882c97187f127ef3947ea45fb0bb2ac3a0ca32d37151004b1c64168808641c465d80c559

  • SSDEEP

    12288:MvdyMlRePlWuktyda+/egKRuCQ1X8eLQRNGoDTStoMsaD2F1PrIGCn:GnlRxuwTI4BqMeGNruaVa6FZCn

Malware Config

Extracted

Family

qakbot

Version

403.549

Botnet

AA

Campaign

1648462350

C2

75.113.214.234:2222

86.98.208.214:2222

41.84.229.218:995

190.73.3.148:2222

113.11.89.170:995

45.241.152.155:993

74.15.2.252:2222

76.70.9.169:2222

103.139.242.30:993

80.11.74.81:2222

105.186.127.127:995

81.60.217.44:995

79.129.121.68:995

75.99.168.194:443

5.95.58.211:2087

129.208.19.253:995

2.34.12.8:443

108.60.213.141:443

176.67.56.94:443

176.88.238.122:995

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      a5bc0cd5d00f106956ae962aaddf631a4fc5fc4da24b36fa2518d1a9700a6f63

    • Size

      875KB

    • MD5

      35a7ed73981b4608879a56617e05d1e4

    • SHA1

      aa05bdd339e484d3e701084a069ffebc7a5c534d

    • SHA256

      a5bc0cd5d00f106956ae962aaddf631a4fc5fc4da24b36fa2518d1a9700a6f63

    • SHA512

      4d38ffda1c385d08c4e581597fb5813fa8fe41570418793b5df6ed1e882c97187f127ef3947ea45fb0bb2ac3a0ca32d37151004b1c64168808641c465d80c559

    • SSDEEP

      12288:MvdyMlRePlWuktyda+/egKRuCQ1X8eLQRNGoDTStoMsaD2F1PrIGCn:GnlRxuwTI4BqMeGNruaVa6FZCn

MITRE ATT&CK Matrix

Tasks