2019-10-14 Qakbot/Qbot IOCs

ZIP DISTRIBUTION:
hxxp://addvitashop[.]com/wp-content/uploads/2019/10/single/864986407.zip

ZIP DELIVERED:
7f510bd103ef98565825aef367580949
64debe9b576ce61688f27255a0db10947f5c8f4dd61cd59cf635e3c269eef98b

VBS
14dde611c59abca79ced0dba283e8419
fd6291bb9078dc26ae1296d09a871e801c40fe27c487fb2b346e24ec86d0146d

EXE DISTRIBUTION
hxxps://www.mottosfer[.]com/wp-content/uploads/2019/10/ttx/sdfdfsdfd.png?bg=spx22

EXE DELIVERED
22966106e2e687a0e1131b1e68ffd479
85ae09fb08756c932e8b8a887a8ca5fcc9ce4819bd56c668f2402d94a3342be8

PEERS FROM 22966106e2e687a0e1131b1e68ffd479 CONFIG:
1.173.254.97:443
100.4.185.8:443
104.152.16.45:995
104.3.91.20:995
104.32.185.213:2222
104.34.122.18:443
105.246.79.97:995
107.12.140.181:443
108.160.123.244:443
108.184.57.213:8443
108.45.183.59:443
108.5.32.66:443
108.55.23.221:443
110.12.60.117:443
111.125.70.30:2222
117.208.254.113:995
12.176.32.146:443
12.5.37.3:443
123.252.128.47:443
159.118.173.115:995
162.244.224.166:443
162.244.225.30:443
166.62.180.194:2078
168.245.228.71:443
172.250.91.246:443
172.78.185.176:443
172.78.45.13:995
173.161.148.169:995
173.178.129.3:443
173.22.120.11:2222
173.247.186.90:22
173.247.186.90:990
173.247.186.90:993
173.247.186.90:995
174.131.181.120:995
174.16.234.171:993
174.48.72.160:443
174.82.131.155:995
176.205.62.156:443
179.36.9.109:443
181.126.80.118:443
181.90.124.162:443
184.180.157.203:2222
184.191.62.78:443
184.74.101.234:995
187.156.73.46:995
187.202.57.9:995
190.120.196.18:1194
190.120.196.18:443
192.24.181.185:443
193.154.185.19:995
196.194.84.165:0
196.194.84.165:2222
197.82.208.249:995
199.126.92.231:995
2.177.115.198:443
2.50.170.151:443
200.104.40.85:443
201.152.122.180:995
201.188.97.244:443
203.192.232.72:443
206.255.212.179:443
206.51.202.106:50002
207.162.184.228:443
207.179.194.91:443
217.162.149.212:443
222.195.69.36:2078
23.240.185.215:443
24.180.7.155:443
24.184.6.58:2222
24.196.158.28:443
24.30.69.9:443
35.136.74.103:443
47.146.169.85:443
47.153.115.154:443
47.153.115.154:995
47.180.66.10:443
47.180.66.10:995
47.202.98.230:443
47.214.144.253:443
47.23.101.26:465
47.23.101.26:993
50.246.229.50:443
50.247.230.33:443
50.46.139.220:443
50.78.93.74:995
62.103.70.217:995
64.150.136.45:443
64.19.74.29:995
64.20.68.35:2083
64.201.125.172:443
65.116.179.83:443
65.30.12.240:995
66.214.75.176:443
67.10.18.112:993
67.214.8.102:443
68.174.15.223:443
68.206.128.75:443
68.225.250.136:443
68.238.56.27:443
68.83.59.107:443
69.119.185.172:995
69.245.144.167:443
70.120.151.69:443
70.169.2.228:21
70.183.177.71:443
70.74.159.126:2222
71.197.126.250:443
71.30.56.170:443
71.77.231.251:443
71.93.60.90:443
72.142.106.198:465
72.16.212.107:995
72.213.98.233:443
72.218.137.100:443
72.29.181.77:2083
73.137.187.150:443
73.138.178.6:443
74.194.4.181:443
74.88.112.250:2222
75.110.101.34:443
75.110.250.89:443
75.110.90.155:443
75.131.72.82:2087
75.131.72.82:995
75.165.132.69:443
75.165.181.122:443
75.69.3.12:443
75.70.218.193:443
75.81.25.223:995
76.116.128.81:443
76.174.122.204:443
76.181.237.223:443
76.80.66.226:443
78.94.55.26:50003
79.106.13.119:995
80.14.209.42:2222
86.98.7.248:443
96.20.238.2:2078
96.20.238.2:2083
96.20.238.2:2087
96.20.238.2:2222
96.20.238.2:61201
96.22.239.27:2222
96.29.219.77:443
96.59.11.86:443
98.165.206.64:443
98.186.155.8:443
98.186.90.192:995
99.228.242.183:995