General

  • Target

    1f1ea467b1ae5b7a6338b138fbaab9a0N.exe

  • Size

    1.2MB

  • Sample

    240828-3zcqxstaje

  • MD5

    1f1ea467b1ae5b7a6338b138fbaab9a0

  • SHA1

    b896bef8202c8d986f08fb1a08a083e155d4d0a5

  • SHA256

    068c6e1e4feb0a44102aaab9d6e7404d607f92c32321224bec78ec80c05d551f

  • SHA512

    12858b8f26bf124231d180ec1b4094886c2545b54852b62d330ca46d42fe6242aa590e4b28248ce19c89b6c3eedc097f557dc45c4a84d52ffdaa7af1b83bc4cb

  • SSDEEP

    24576:gpglnVHGGPPC8cedo46suFzpSBz63UUlL:gyVHGGnldotZpSA3UAL

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

clinton21

Campaign

1621519871

C2

197.45.110.165:995

24.122.166.173:443

105.198.236.101:443

47.22.148.6:443

149.28.99.97:995

45.63.107.192:995

71.187.170.235:443

144.139.47.206:443

151.205.102.42:443

72.252.201.69:443

189.210.115.207:443

81.97.154.100:443

81.214.126.173:2222

72.240.200.181:2222

96.61.23.88:995

71.163.224.97:443

75.67.192.125:443

75.137.47.174:443

24.55.112.61:443

140.82.49.12:443

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      1f1ea467b1ae5b7a6338b138fbaab9a0N.exe

    • Size

      1.2MB

    • MD5

      1f1ea467b1ae5b7a6338b138fbaab9a0

    • SHA1

      b896bef8202c8d986f08fb1a08a083e155d4d0a5

    • SHA256

      068c6e1e4feb0a44102aaab9d6e7404d607f92c32321224bec78ec80c05d551f

    • SHA512

      12858b8f26bf124231d180ec1b4094886c2545b54852b62d330ca46d42fe6242aa590e4b28248ce19c89b6c3eedc097f557dc45c4a84d52ffdaa7af1b83bc4cb

    • SSDEEP

      24576:gpglnVHGGPPC8cedo46suFzpSBz63UUlL:gyVHGGnldotZpSA3UAL

MITRE ATT&CK Enterprise v15

Tasks