2020-04-14 - URLs/hashes for Qakbot (Qbot) spx96 zip files

2020-04-14 (TUESDAY) - URLS FOR ZIP ARCHIVES FOR QAKBOT (QBOT) SPX96:

- hxxps://accentlandscapes.com/string/13365/13365.zip
- hxxps://accentlandscapes.com/string/7666799/7666799.zip
- hxxps://accentlandscapes.com/string/08809662/08809662.zip
- hxxp://ahurasolutions.com/string/28939.zip
- hxxp://ahurasolutions.com/string/50928/50928.zip
- hxxp://ahurasolutions.com/string/97960/97960.zip
- hxxp://ahurasolutions.com/string/0309462.zip
- hxxp://alphahotel.in/string/2080591/2080591.zip
- hxxp://alphahotel.in/string/584769692.zip
- hxxp://arkangelpetsitting.co.uk/string/737187.zip
- hxxp://asnperu.net/string/83389.zip
- hxxp://auxiliarypower.in/string/09421.zip
- hxxp://auxiliarypower.in/string/73005.zip
- hxxp://auxiliarypower.in/string/5745781/5745781.zip
- hxxp://auxiliarypower.in/string/561199214/561199214.zip
- hxxps://blankki.com/string/256476.zip
- hxxps://blankki.com/string/1024674/1024674.zip
- hxxp://carabettaechifari.tk/string/08358054/08358054.zip
- hxxp://carabettaechifari.tk/string/614616978/614616978.zip
- hxxp://carabettaechifari.tk/string/711668642.zip
- hxxps://charlemagne.fr/string/8731575/8731575.zip
- hxxps://charlemagne.fr/string/9014781.zip
- hxxps://clermontjumps.net/string/38832/38832.zip
- hxxps://clermontjumps.net/string/54736/54736.zip
- hxxps://clermontjumps.net/string/7314418.zip
- hxxps://clermontjumps.net/string/902470173.zip
- hxxps://clermontjumps.net/string/985811544.zip
- hxxps://denieuweklank.nl/string/021473856.zip
- hxxps://denieuweklank.nl/string/22759399/22759399.zip
- hxxps://drivecx.com/string/014518/014518.zip
- hxxps://drivecx.com/string/222688611.zip
- hxxps://drivecx.com/string/684862.zip
- hxxp://foodbooktv.com/string/937494.zip
- hxxps://giveawayshub.com/string/64342060/64342060.zip
- hxxps://giveawayshub.com/string/749131130.zip
- hxxps://gsm-laboratory.com/string/009540421.zip
- hxxps://gsm-laboratory.com/string/05907/05907.zip
- hxxps://gsm-laboratory.com/string/2259983.zip
- hxxps://hellomessager.com/string/487434/487434.zip
- hxxps://hellomessager.com/string/67893798.zip
- hxxps://hellomessager.com/string/9336248.zip
- hxxps://hotel-sangiorgio.com/string/974483/974483.zip
- hxxp://ipbg.org.br/string/637148407/637148407.zip
- hxxp://ipbg.org.br/string/9016172.zip
- hxxp://kineactiefplus.be/string/016739227.zip
- hxxp://kineactiefplus.be/string/20812.zip
- hxxp://langsirterkini.net/string/134437527/134437527.zip
- hxxp://maluna.com.br/string/604291/604291.zip
- hxxp://maluna.com.br/string/689305.zip
- hxxp://maluna.com.br/string/9323831.zip
- hxxps://marketevip.com/string/9651583/9651583.zip
- hxxps://marocaji.com/string/92174460/92174460.zip
- hxxp://melias.se/string/64928487.zip
- hxxps://microvpn.info/string/530345404/530345404.zip
- hxxps://mochandmade.us/string/443327271/443327271.zip
- hxxps://mochandmade.us/string/543110348/543110348.zip
- hxxps://mochandmade.us/string/65869.zip
- hxxps://mochandmade.us/string/92098/92098.zip
- hxxp://nowkh.com/string/00631353.zip
- hxxp://nowkh.com/string/11865/11865.zip
- hxxp://nowkh.com/string/22076/22076.zip
- hxxp://nowkh.com/string/3979760.zip
- hxxp://nowkh.com/string/423000175/423000175.zip
- hxxp://nowkh.com/string/815692.zip
- hxxp://nowkh.com/string/96668081/96668081.zip
- hxxps://orientpaints.info/string/67406.zip
- hxxps://orientpaints.info/string/782402/782402.zip
- hxxp://paradisecreationsllc.com/string/6342101.zip
- hxxp://paradisecreationsllc.com/string/8435506/8435506.zip
- hxxp://peternoresson.se/string/47029199/47029199.zip
- hxxp://peternoresson.se/string/574205096/574205096.zip
- hxxp://peternoresson.se/string/6582750.zip
- hxxp://peternoresson.se/string/86444.zip
- hxxp://peternoresson.se/string/8973124.zip
- hxxp://quehagoencartagena.com/string/075195460/075195460.zip
- hxxp://quehagoencartagena.com/string/804903/804903.zip
- hxxps://restaurantemexicano.es/string/0830591/0830591.zip
- hxxps://restaurantemexicano.es/string/91554.zip
- hxxp://saivilla.xyz/string/44524573.zip
- hxxp://saivilla.xyz/string/466158369/466158369.zip
- hxxp://saivilla.xyz/string/69188.zip
- hxxps://sakibtd.xyz/string/2409970/2409970.zip
- hxxp://shirazholding.ir/string/368095/368095.zip
- hxxp://sidusbuildcon.com/string/05635855/05635855.zip
- hxxp://sidusbuildcon.com/string/1342531/1342531.zip
- hxxp://sidusbuildcon.com/string/21914653.zip
- hxxps://suka365bet.xyz/string/61820319.zip
- hxxps://suka365bet.xyz/string/78043/78043.zip
- hxxps://viradoc.com/string/6653052/6653052.zip
- hxxps://waterosmo.com/string/07879.zip
- hxxps://waterosmo.com/string/606793.zip
- hxxps://waterosmo.com/string/72745.zip
- hxxps://www.devgroup.club/string/151531856.zip
- hxxps://www.hotel-sangiorgio.com/string/974483/974483.zip

EXAMPLES OF DOWNLOADED ZIP ARCHIVES:

- 1e08af79572c3bb68bec6e3c2fd74b7909cdf19cafd8dccc5dbfd4593cf5465b
- 3152295e77c3a667632f20906de63b0e974e214a52f055e82a90e86cb958f10a  368095.zip
- 37c1ab8fcf50b62894f1e90e7e506e718dbae56b3a1f825e1ce2338c884f6cc0  242033.zip
- 48cb34bb77db8700e3877d442c9a0c770712270cad24ba9856ba40c7e7fe1710  11865.zip
- 600eb28282eb1d3fa9fd6552e1f1aa601138e21cae8efac79b9b58582453dddb  014518.zip
- 613f762cf228130808ea511808881a820624718f3cef6c0fee05665ede88aaf2  53636.zip
- 6f60b68532bdfba4179104a5e989f833bce4bb604c7fa66e1b1a48a09851586f
- 8c4aad150aac6f786a1a59f76f84681547cca0c774325f0c2ee6fb55836f183d  985811544.zip
- 8d2436265d8fe8e20a4200942748833281d130f1fcc4113d576f24e87af83db8  134437527.zip
- 9b006f67ac38514c909a60237dc04eb7a965cd4f158d9adc9fe044eb887fff6f  49774.zip
- a4e87b57b3133f6db37b4eee9ed5bf979fceced524214dba530131cbac290221  379375979.zip
- c684e4e9daa2ddb42a5c50c00445cd5e69623f7b6941ab5b4747e8d03f5bdb04  03694.zip

EXAMPLES OF EXTRACTED VBS FILES:

- 007fc747396ade94806e9883a21f96c92cce4085d5bed25dfba093eabe4ab71d  NUM_39868.vbs
- 061554ce7104df515bf607c7f40b8128b6204d785b72e9768462ece10968734f  NUM_14745.vbs
- 2390372fa684ff25a28cbc97a83219d14165a05805de6c1ac6a3a5fc29285cc1  NUM_33063.vbs
- 2e9710916dd7b493b00389cc3d913ebf75982c53e6201b5adea1292396903489  NUM_19015.vbs
- 4d417878535d2be2fbe5b995d15bac42ef0f7548a0baaefbf03b6c4f7468928c  NUM_35220.vbs
- 65fbd84c3404738bbabf069ddff7d1c343eb4a36b25a773d44cdc84f4dc7ea4f  NUM_30108.vbs
- 508c5eaf851b873e3b29de4d5ed768e54cc731c32a1e1bfec906930516362604  NUM_9730.vbs
- 8becf4ee790a4836622648f22255d78d5906f7b37f1ceb84db5095df96cfcd22  NUM_5341.vbs
- a7e5f60c7f1b15e493de53422d5907297919d163514d3b0065826fd810bf5a9e  NUM_40515.vbs
- b0686ee3172a9b2c372b45823058925b006d49d4cafe3455d5910a278d6378d0  NUM_40009.vbs
- b6013e876a0759d5fd068f70efa8a2cf15d824b8fda21f2d073e93531f76b841  NUM_2580.vbs