MalwareQuinn

QakbotIOCs_Sep152020

Sep 15th, 2020 (edited)
11,539
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.26 KB | None | 0 0
  1. After no abc distro yesterday, Qakbot spun up abc003 around 11:00 UTC. As I don't have any zips, expect attachment only in spam today.
  2.  
  3. Update: Seems to be excel files instead of docs today. Excel has a single URL.
  4.  
  5. Url: http://oceanbm.ca/hpplo/555555555.png
  6.  
  7. MalwareBazaar: https://bazaar.abuse.ch/sample/e366c18e2f2389d4e90386f01876174074019a021b6eacfceb187aaa53560078/
  8.  
  9. Sandbox: https://app.any.run/tasks/7e4c91ef-3b0a-4da9-b563-27245d2e677a/
  10.  
  11. IPs:
  12. 134.0.196.46:995
  13. 187.200.69.215:443
  14. 66.222.88.126:995
  15. 151.73.125.102:443
  16. 186.94.248.208:2078
  17. 71.56.53.127:443
  18. 87.65.204.240:995
  19. 63.155.74.135:995
  20. 68.184.45.73:443
  21. 82.77.105.236:2222
  22. 23.240.70.80:443
  23. 24.138.77.61:443
  24. 76.111.128.194:443
  25. 75.136.40.155:443
  26. 75.182.214.87:443
  27. 73.216.60.90:2222
  28. 148.240.52.146:443
  29. 108.185.113.12:443
  30. 216.163.4.136:443
  31. 66.215.32.224:443
  32. 35.134.202.234:443
  33. 84.247.55.190:443
  34. 77.159.149.74:443
  35. 72.204.242.138:32102
  36. 24.27.82.216:2222
  37. 207.255.161.8:465
  38. 206.183.190.53:993
  39. 134.228.24.29:443
  40. 96.41.93.96:443
  41. 84.232.238.30:443
  42. 184.98.103.204:995
  43. 72.186.1.237:443
  44. 81.133.234.36:2222
  45. 189.163.185.110:443
  46. 71.84.5.114:995
  47. 68.225.56.31:443
  48. 108.178.66.82:995
  49. 172.87.134.226:443
  50. 216.201.162.158:443
  51. 67.6.55.77:443
  52. 76.170.77.99:995
  53. 94.53.92.42:443
  54. 74.195.88.59:995
  55. 64.121.114.87:443
  56. 166.62.180.194:2078
  57. 209.182.122.217:443
  58. 189.150.107.132:443
  59. 72.240.200.181:2222
  60. 73.32.115.251:443
  61. 72.223.123.155:443
  62. 75.90.53.37:443
  63. 205.178.7.90:443
  64. 187.213.52.174:995
  65. 45.32.155.12:443
  66. 76.179.54.116:443
  67. 71.187.170.235:443
  68. 69.167.206.238:50001
  69. 207.255.161.8:2078
  70. 207.255.161.8:32100
  71. 31.5.21.66:443
  72. 178.222.113.168:995
  73. 86.162.13.18:2222
  74. 71.126.139.251:443
  75. 100.1.39.62:443
  76. 5.13.144.137:995
  77. 67.165.206.193:993
  78. 50.244.112.10:995
  79. 72.204.242.138:465
  80. 47.44.217.98:443
  81. 72.36.59.46:2222
  82. 2.90.87.34:995
  83. 213.120.109.73:2222
  84. 47.146.32.175:443
  85. 176.223.8.159:2222
  86. 69.11.247.242:443
  87. 75.81.25.223:443
  88. 50.232.172.114:443
  89. 184.180.157.203:2222
  90. 190.30.187.34:443
  91. 96.18.240.158:443
  92. 37.210.186.213:61201
  93. 75.136.26.147:443
  94. 96.255.188.58:443
  95. 207.255.161.8:993
  96. 173.26.189.151:443
  97. 70.123.92.175:2222
  98. 72.82.15.220:443
  99. 108.46.145.30:443
  100. 5.15.29.67:443
  101. 74.75.237.11:443
  102. 68.174.15.223:443
  103. 156.213.179.139:443
  104. 199.247.22.145:443
  105. 188.51.33.232:995
  106. 50.244.112.106:443
  107. 94.59.227.197:995
  108. 47.28.131.209:443
  109. 118.167.118.227:443
  110. 71.182.142.63:443
  111. 141.158.47.123:443
  112. 72.204.242.138:990
  113. 80.14.209.42:2222
  114. 208.93.202.49:443
  115. 41.228.24.11:443
  116. 72.179.13.59:443
  117. 24.187.59.203:2222
  118. 24.37.178.158:443
  119. 50.104.68.223:443
  120. 5.12.0.239:443
  121. 173.245.152.231:443
  122. 72.214.55.195:995
  123. 66.57.216.53:993
  124. 189.231.196.236:443
  125. 67.209.195.198:443
  126. 24.231.54.185:2222
  127. 98.240.24.57:443
  128. 207.255.161.8:995
  129. 86.98.89.62:2222
  130. 217.165.164.132:2222
  131. 51.223.158.125:443
  132. 45.77.193.83:443
  133. 207.246.75.201:443
  134. 95.179.247.224:443
  135. 199.247.16.80:443
  136. 73.228.1.246:443
  137. 24.229.150.54:995
  138. 209.137.209.163:995
  139. 45.32.154.10:443
  140. 5.193.181.221:2078
  141. 41.232.231.135:995
  142. 148.101.68.96:443
  143. 190.85.91.154:443
  144. 144.139.47.206:443
  145. 72.190.101.70:443
  146. 80.195.103.146:2222
  147. 2.91.109.154:995
  148. 95.77.144.238:443
  149. 47.180.66.10:443
  150. 77.27.174.49:995
  151. 195.162.106.93:2222
  152. 190.220.8.10:443
  153. 191.84.7.1:443
  154. 5.234.221.88:995
  155. 117.218.208.239:443
  156. 84.117.176.32:443
  157. 73.227.232.166:443
  158. 96.30.198.161:443
  159. 47.146.169.85:443
  160. 46.53.26.66:443
  161. 72.204.242.138:20
  162.  
Add Comment
Please, Sign In to add comment