QAKBOT IOC's 8/14/2020

QAKBOT IOCs 8/14/2020
*********************

File Writes
************
08142020_1934875347.doc -> SHA256: 1d9e28c03fac378ba6dca1e14f087c8699132a492cc12375722b358b8807c98e
JHJKGHuggUGUGYYuyggg.vbs -> SHA256: 214fd312196dd5769f94ed778c50df1eaf49a5c8287c67edcf2fbd05dff02cb2
UIYUIYUIYuiyuiYUIYYuyty.vbs -> SHA256: 4639cb4ccdef149ef325770ccf4fff658b7cb528d71661113dbfe9e1c683dbf9
djsfgytdftftyYFGfghffghYYTTT.cmd -> SHA256: 94a12075382cb44133ba8dd51973b583d4c2514f7d3d7414ae4d9a92b5354584
Loterios.exe -> SHA256: 939b532d8f45ffb53d19cae7c2a54e35c8f58b3879e1696d9db41fa43ef8a995  (This file was PuTTY on the 08/10/2020)

Network IOCs
*************
http[:]//rijschoolfastandserious[.]nl/rprmloaw/111111.png
http[:]//nanfeiqiaowang[.]com/tsxwe/111111.png
http[:]//forum[.]insteon[.]com/suowb/111111.png
http[:]//webtest[.]pp[.]ua/yksrpucvx/111111.png
http[:]//quoraforum[.]com/btmlxjxmyxb/111111.png
http[:]//quickinsolutions[.]com/wfqggeott/111111.png
http[:]//bronco[.]is/pdniovzkgwwt/111111.png
http[:]//studiomascellaro[.]it/wnzzsbzbd/111111.png
http[:]//craniotylla[.]ch/vzufnt/111111.png
http[:]//marineworks[.]eu/dwaunrsamlbq/111111.png