General

  • Target

    9ae4ca867bf51bb444764ef69bf9f71b7e4411aeeff3c6388015e4ef8ce498d4.exe

  • Size

    1.6MB

  • Sample

    241124-kr4kkasngz

  • MD5

    ff425f6755c73ea16792dd61bd9e45ae

  • SHA1

    a32b9a5946d139fb417bccc157656f37c3436d44

  • SHA256

    9ae4ca867bf51bb444764ef69bf9f71b7e4411aeeff3c6388015e4ef8ce498d4

  • SHA512

    8218c4c2852da4351d8d28063605b2c23036e99d6983c62873067656f15e718be7a70c83584a2e352fbc738cf532c0f24fd565e4dc77d7418fa2ff1d04badbdd

  • SSDEEP

    24576:F9mB+XxJ7zUqNS8KqCx2ffNrC0O60+bPzTk1wK7TpKsZ3:FUBav7zbS8pCx2fftCv6JLwJ7FKsZ3

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

tr

Campaign

1634541613

C2

120.150.218.241:995

24.119.214.7:443

103.143.8.71:443

81.241.252.59:2078

81.250.153.227:2222

174.54.193.186:443

73.52.50.32:443

39.49.122.240:995

86.220.112.26:2222

103.82.211.39:465

78.191.38.33:995

216.201.162.158:443

181.118.183.94:443

66.177.215.152:0

208.78.220.143:443

94.200.181.154:443

136.232.34.70:443

136.143.11.232:443

81.213.59.22:443

103.82.211.39:990

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      9ae4ca867bf51bb444764ef69bf9f71b7e4411aeeff3c6388015e4ef8ce498d4.exe

    • Size

      1.6MB

    • MD5

      ff425f6755c73ea16792dd61bd9e45ae

    • SHA1

      a32b9a5946d139fb417bccc157656f37c3436d44

    • SHA256

      9ae4ca867bf51bb444764ef69bf9f71b7e4411aeeff3c6388015e4ef8ce498d4

    • SHA512

      8218c4c2852da4351d8d28063605b2c23036e99d6983c62873067656f15e718be7a70c83584a2e352fbc738cf532c0f24fd565e4dc77d7418fa2ff1d04badbdd

    • SSDEEP

      24576:F9mB+XxJ7zUqNS8KqCx2ffNrC0O60+bPzTk1wK7TpKsZ3:FUBav7zbS8pCx2fftCv6JLwJ7FKsZ3

MITRE ATT&CK Enterprise v15

Tasks