2019-10-22 QAKBOT / QBOT IOCs

***2019-10-22 QAKBOT/QBOT***

ZIP DISTRIBUTION:
hxxp://futurea2z[.]com/wp-content/uploads/2019/10/8iL1lDZJJ/JVC_19974.zip

ZIP DELIVERED (JVC_19974.zip):
4ec50d56d073de6e07fca993681a7819
30cf264b5be98f9b6151ae9b038c99f86adc286111429ea30ab0f72861aa2898

ZIP CONTENT (JVC_187.vbs):
5880b6ba79c03364ab2a408d819e0dc5
688bf430b4386a62beaf2ca89060d18fdc2e1710af008e5a4a5be91377d14020

EXE DISTRIBUTION:
hxxp://clippingpatharena[.]com/wp-content/uploads/2019/10/acl/mcidnvjbds.png?bg=spx26

EXE DELIVERED (mcidnvjbds.png)
3d2319c455f37e482dc78fda4d1a6f26
9ecd2ae43eae0245c9891508a7fdd97edd7d514b835dafa35195ac88cddb6cb3

C2s FROM 3d2319c455f37e482dc78fda4d1a6f26:
100.4.185[.]8:443
104.152.16[.]45:995
104.3.91[.]20:995
104.32.185[.]213:2222
104.34.122[.]18:443
105.246.74[.]86:995
107.12.140[.]181:443
108.160.123[.]244:443
108.45.183[.]59:443
108.5.32[.]66:443
108.55.23[.]221:443
110.12.60[.]117:443
111.125.70[.]30:2222
112.171.126[.]153:443
116.58.100[.]130:443
116.72.208[.]166:2222
12.176.32[.]146:443
12.5.37[.]3:443
138.122.5[.]214:443
159.118.173[.]115:995
162.244.224[.]166:443
162.244.225[.]30:443
166.62.180[.]194:2078
168.245.228[.]71:443
172.78.185[.]176:443
173.172.205[.]216:443
173.178.129[.]3:443
173.22.120[.]11:2222
173.247.186[.]90:2083
173.247.186[.]90:443
173.247.186[.]90:465
173.247.186[.]90:995
173.3.132[.]17:995
174.110.223[.]97:443
174.131.181[.]120:995
174.16.234[.]171:993
174.48.72[.]160:443
176.205.62[.]156:443
181.126.80[.]118:443
181.143.141[.]226:995
181.197.195[.]138:995
181.90.124[.]162:443
184.180.157[.]203:2222
184.191.62[.]78:443
184.74.101[.]234:995
185.219.83[.]73:443
186.47.208[.]238:50000
187.163.139[.]200:993
190.120.196[.]18:443
190.120.196[.]18:993
190.120.196[.]18:995
192.24.181[.]185:443
193.154.185[.]19:995
196.194.84[.]8:2222
197.45.194[.]82:995
197.89.42[.]128:995
199.126.92[.]231:995
2.177.20[.]188:443
2.50.170[.]151:443
2.89.108[.]17:443
201.152.160[.]155:995
201.188.115[.]127:443
206.255.212[.]179:443
206.51.202[.]106:50002
207.162.184[.]228:443
207.179.194[.]91:443
209.182.122[.]217:443
217.162.149[.]212:443
222.195.69[.]36:2078
23.240.185[.]215:443
24.180.7[.]155:443
24.184.6[.]58:2222
24.201.68[.]105:2078
24.201.68[.]105:2083
24.201.68[.]105:2087
24.201.68[.]105:2222
24.201.68[.]105:61201
24.30.71[.]200:443
24.48.5[.]105:2222
32.208.1[.]239:443
32.208.1[.]239:8443
36.236.231[.]105:443
47.136.226[.]219:443
47.144.93[.]71:443
47.146.169[.]85:443
47.148.133[.]120:443
47.153.115[.]154:443
47.153.115[.]154:995
47.180.66[.]10:995
47.202.98[.]230:443
47.214.144[.]253:443
47.23.101[.]26:465
47.23.101[.]26:993
5.182.39[.]156:443
50.246.229[.]50:443
50.247.230[.]33:443
50.78.93[.]74:995
62.103.70[.]217:995
64.19.74[.]29:995
65.30.12[.]240:443
66.214.75[.]176:443
66.51.231[.]183:443
67.10.18[.]112:993
67.214.201[.]117:2222
67.214.8[.]102:443
67.246.16[.]250:995
67.77.162[.]13:443
68.174.15[.]223:443
68.238.144[.]55:443
69.119.185[.]172:995
70.74.159[.]126:2222
71.197.126[.]250:443
71.30.56[.]170:443
71.77.231[.]251:443
71.93.60[.]90:443
72.132.247[.]194:995
72.16.212[.]107:995
72.213.98[.]233:443
72.218.137[.]100:443
72.29.181[.]77:2083
72.47.115[.]182:443
73.226.220[.]56:443
73.37.61[.]237:443
74.134.4[.]236:443
74.194.4[.]181:443
74.88.112[.]250:2222
75.110.250[.]89:443
75.131.239[.]76:443
75.131.72[.]82:443
75.131.72[.]82:995
75.165.132[.]69:443
75.182.214[.]87:443
75.70.218[.]193:443
75.81.25[.]223:995
76.116.128[.]81:443
76.181.237[.]223:443
76.80.66[.]226:443
80.14.209[.]42:2222
81.149.189[.]61:8443
86.98.86[.]178:443
89.27.249[.]148:443
93.177.144[.]236:443
93.177.205[.]72:443
96.20.84[.]254:8443
96.22.239[.]27:2222
96.59.11[.]86:443
98.165.206[.]64:443
98.186.155[.]8:443
98.186.90[.]192:995
99.228.242[.]183:995