Advertisement
ExecuteMalware

2021-02-15 Qakbot IOCs

Feb 15th, 2021
3,643
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.52 KB | None | 0 0
  1. THREAT IDENTIFICATION: QAKBOT
  2.  
  3. SENDERS OBSERVED
  4. rney@keebit.de
  5. rfagg@pmt.org
  6.  
  7. EXCEL FILE HASHES
  8. charges (87).xls
  9. ca8ae6e93949a57b9da1f70cdf87eced
  10.  
  11. documentation (73).xls
  12. af5826ddd2260f11f567a035edd4d753
  13.  
  14. immediately (51).xls
  15. 753e22cecde06dbedd90d32a8a40f47c
  16.  
  17. PAYLOAD DOWNLOAD URLS
  18. https://gotoshopping.pk/ds/1502.gif
  19. https://pamltd.co.uk/ds/1502.gif
  20. https://zmprintingbd.com/ds/1502.gif
  21.  
  22. gotoshopping.pk
  23. pamltd.co.uk
  24. zmprintingbd.com
  25.  
  26. PAYLOAD FILE HASHES
  27. N/A
  28.  
  29. The payload urls had been taken down.
  30.  
  31.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement