2020-03-04 QBot IOCs

ZIP FILE HASHES
9dba9561f151485bebc6c071dba77954

MALDOC FILE HASHES
b4f2177688bfa9c61d874f1b6e159fb4

PAYLOAD FILE HASHES
aeb65430f28a2f0b48956a721036a85d

QBOT MALDOC DISTRIBUTION URLS
http://axeloffroad.com/wp-content/uploads/2020/02/white/820655.zip
http://batilservice.xyz/wp-content/uploads/2020/02/white/3837548/3837548.zip
http://bioenergy.uz.ua/white/2906186/2906186.zip
http://blog.metodograndao.com.br/wp-content/uploads/2020/02/white/2666629/2666629.zip
http://blog.mizbancloud.ir/white/55636999/55636999.zip
http://book.gitapress.org/wp-content/uploads/2020/02/white/1064288.zip
http://book.gitapress.org/wp-content/uploads/2020/02/white/20737964.zip
http://book.gitapress.org/wp-content/uploads/2020/02/white/40197987/40197987.zip
http://doaretreat.com/wp-content/plugins/apikey/white/9096.zip
http://exindia.in/wp-content/uploads/2020/02/white/0230.zip
http://exindia.in/wp-content/uploads/2020/02/white/28977832.zip
http://greenpointcatering.nl/wp-content/uploads/2020/02/white/90310369/90310369.zip
http://media-pixel.co.uk/white/23406921/23406921.zip
http://media-pixel.co.uk/white/39254.zip
http://media-pixel.co.uk/white/9808/9808.zip
http://nicholasalexander.co.uk/wp-content/uploads/white/2185.zip
http://remedy-mart.com/white/8481222.zip
http://tst.nandemo-developer.xyz/white/766881.zip
http://tst.nandemo-developer.xyz/wp-content/uploads/2020/02/white/5293542/5293542.zip

QBOT PAYLOAD
http://tubolso.cl/wp-content/uploads/2020/02/white/444444.png
http://samphaopet.com/wp-content/uploads/2020/02/idle/111111.png
http://icietdemain.fr/contents/2020/02/idle/222222.png
http://murreeweather.com/wp-content/white/444444.png