MalwareQuinn

QakbotIOC_0910_2020

Sep 10th, 2020
14,536
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.12 KB | None | 0 0
  1. Qakbot spun up abc002 around 15:43 UTC. Looks like its going to be attachment only spam again. If anyone sees the docs, feel free to upload to urlhaus and ping me so I can update paste.
  2.  
  3. malware bazaar: https://bazaar.abuse.ch/sample/a17e79c5b8367db0e97a2d800ec7d079d3247007833c07f042e4859211853b6d/
  4.  
  5. IPs:
  6. 73.216.60.90:2222
  7. 71.74.12.34:443
  8. 184.98.103.204:995
  9. 71.84.5.114:995
  10. 108.190.151.108:2222
  11. 76.170.77.99:995
  12. 95.77.223.148:443
  13. 85.121.42.12:995
  14. 72.209.191.27:443
  15. 166.62.180.194:2078
  16. 189.157.207.155:995
  17. 108.185.113.12:443
  18. 72.204.242.138:32102
  19. 216.163.4.136:443
  20. 95.76.109.181:443
  21. 108.31.15.10:995
  22. 188.25.162.27:443
  23. 76.111.128.194:443
  24. 209.182.122.217:443
  25. 66.215.32.224:443
  26. 74.195.88.59:995
  27. 35.134.202.234:443
  28. 69.47.239.10:443
  29. 108.34.180.25:443
  30. 77.159.149.74:443
  31. 50.29.166.232:995
  32. 207.255.161.8:465
  33. 65.131.28.224:995
  34. 45.32.155.12:443
  35. 96.18.240.158:443
  36. 216.201.162.158:443
  37. 151.73.125.102:443
  38. 207.255.161.8:993
  39. 200.75.136.78:443
  40. 66.57.216.53:993
  41. 71.126.139.251:443
  42. 96.37.113.36:993
  43. 71.187.170.235:443
  44. 69.167.206.238:50001
  45. 68.174.15.223:443
  46. 207.255.161.8:32100
  47. 47.201.1.210:443
  48. 68.190.152.98:443
  49. 189.210.114.157:443
  50. 205.178.7.90:443
  51. 68.225.56.31:443
  52. 24.71.28.247:443
  53. 141.193.83.107:443
  54. 50.244.112.10:995
  55. 72.204.242.138:465
  56. 108.191.28.158:443
  57. 72.36.59.46:2222
  58. 75.136.26.147:443
  59. 68.134.181.98:443
  60. 208.82.44.203:443
  61. 47.146.32.175:443
  62. 69.11.247.242:443
  63. 75.81.25.223:443
  64. 66.31.96.223:443
  65. 217.162.149.212:443
  66. 96.247.177.63:443
  67. 50.232.172.114:443
  68. 68.116.193.239:443
  69. 184.180.157.203:2222
  70. 73.32.115.251:443
  71. 2.91.73.118:995
  72. 98.26.50.62:995
  73. 79.118.24.67:443
  74. 37.210.186.213:61201
  75. 199.247.22.145:443
  76. 2.91.125.145:995
  77. 213.120.109.73:2222
  78. 72.179.13.59:443
  79. 24.37.178.158:443
  80. 50.104.68.223:443
  81. 190.207.11.41:2078
  82. 67.209.195.198:443
  83. 207.255.161.8:995
  84. 209.137.209.163:995
  85. 93.113.177.152:443
  86. 189.140.48.54:443
  87. 86.174.116.60:2222
  88. 216.146.110.68:443
  89. 50.244.112.106:443
  90. 47.28.131.209:443
  91. 181.133.218.233:443
  92. 80.14.209.42:2222
  93. 75.170.94.218:443
  94. 207.255.18.67:443
  95. 75.137.239.211:443
  96. 45.77.193.83:443
  97. 72.204.242.138:990
  98. 45.32.154.10:443
  99. 95.179.247.224:443
  100. 199.247.16.80:443
  101. 207.246.75.201:443
  102. 73.228.1.246:443
  103. 86.163.174.7:2222
  104. 98.16.204.189:995
  105. 5.13.70.3:443
  106. 75.136.40.155:443
  107. 67.149.82.94:8443
  108. 73.227.232.166:443
  109. 99.240.226.2:443
  110. 187.201.250.59:995
  111. 151.205.102.42:443
  112. 85.204.189.105:443
  113. 200.124.231.21:443
  114. 172.87.134.226:443
  115. 72.240.200.181:2222
  116. 71.182.142.63:443
  117. 185.246.9.69:995
  118. 5.193.181.221:2078
  119. 178.222.21.87:995
  120. 85.122.141.42:995
  121. 74.102.76.128:443
  122. 74.75.216.202:443
  123. 72.190.101.70:443
  124. 189.160.236.226:443
  125. 98.121.187.78:443
  126. 189.231.196.236:443
  127. 47.146.169.85:443
  128. 74.75.237.11:443
  129. 175.211.225.118:443
  130. 72.204.242.138:20
  131. 86.97.162.2:443
  132. 80.195.103.146:2222
  133. 50.247.230.33:995
  134. 41.228.198.27:443
  135. 141.158.47.123:443
  136. 83.103.182.50:443
  137. 47.44.217.98:443
  138. 207.255.161.8:443
  139. 207.255.161.8:2087
  140. 207.255.161.8:32103
  141. 67.8.103.21:443
  142. 67.6.51.74:443
  143. 108.46.145.30:443
  144. 71.50.215.14:0
  145. 72.204.242.138:53
  146. 70.123.92.175:2222
  147. 192.40.225.168:443
  148. 80.240.26.178:443
  149. 95.77.144.238:443
  150. 94.59.227.197:995
  151. 2.50.59.219:443
  152. 96.41.93.96:443
  153. 172.78.30.215:443
  154. 190.85.91.154:443
  155. 36.230.79.87:443
  156.  
Add Comment
Please, Sign In to add comment