Qakbot (Qbot) - это банковский троян - вредоносная программа, предназначенная для сбора банковской информации у жертв. Qbot нацелен на организации преимущественно в США. Он оснащен различными сложными функциями уклонения и кражи информации, червеподобной функциональностью и сильным механизмом персистенции.
Qakbot Malware IOCs
- Qbot Botnet IOC
- Qbot Trojan IOCs
- Qakbot (Qbot) Trojan IOCs
- Qakbot Malware IOCs
- Qakbot Malware IOCs - Part 5
- Qakbot Malware IOCs - Part 6
- Qakbot Trojan IOCs - Part 7
Indicators of Compromise
IPv4 Port Combinations
- 1.32.64.190:80
- 102.157.22.8:443
- 102.158.135.167:443
- 103.156.237.139:443
- 105.108.80.229:443
- 105.69.147.88:995
- 118.216.99.232:443
- 134.35.2.138:443
- 14.227.159.241:443
- 148.213.109.165:995
- 163.182.177.80:443
- 179.113.97.4:32101
- 181.141.3.126:443
- 181.44.34.172:443
- 186.18.77.99:443
- 186.188.96.197:443
- 186.86.212.138:443
- 190.100.149.122:995
- 190.11.198.76:443
- 196.235.137.166:443
- 197.158.89.85:443
- 197.204.101.178:443
- 197.92.143.218:443
- 23.225.104.250:443
- 41.103.252.215:443
- 41.104.109.190:443
- 41.107.209.163:443
- 41.111.52.120:443
- 41.111.85.167:443
- 41.96.120.232:443
- 41.99.208.154:443
- 58.186.75.42:443
- 72.88.245.71:443
- 82.12.196.197:443
- 94.52.127.44:443
Domains
- familiarmovers.com
- hotelkingdom.co.tz
URLs
- http://familiarmovers.com/su/N3280519605.zip
- http://hotelkingdom.co.tz/ucta/N3280519605.zip
- https://aifoundation.in/gaum/tpsaststnsectveuleoauiib
- https://alberguesagradafamiliaac.com/it/Co978804506.zip
- https://alberguesagradafamiliaac.com/it/epulstleeoenmairedsl
- https://altoareiao.com.br/ro/Co978804506.zip
- https://altoareiao.com.br/ro/nilsihte
- https://escapiko.com/eia/aeteinvm
- https://escapiko.com/eia/Co978804506.zip
- https://healthpro.ai/ensl/Co978804506.zip
- https://healthpro.ai/ensl/utaoqtiiepo
- https://jamming.pe/du/Co978804506.zip
- https://jamming.pe/du/emoudiqsi
- https://lhmi.net/uq/Co978804506.zip
- https://lhmi.net/uq/iiaeidsaqucep
- https://mubarikimpex.com.pk/tedo/Co978804506.zip
- https://mubarikimpex.com.pk/tedo/mledituaumaielatnos
- https://rakmediagroup.com/upeo/suqioe
- https://rbsoftwares.in/ramu/cfnaieierma
- https://rbsoftwares.in/ramu/Co978804506.zip
- https://sushi-box.it/lm/Co978804506.zip
- https://sushi-box.it/lm/eptmomaleutvta
- https://viveirobompastor.com.br/tavn/Co978804506.zip
- https://viveirobompastor.com.br/tavn/cpdetticaatuiid
Emails
- adgyorll@casaternario.com
- afhosamsem.i@photoscare.com
- aoi.arsbellh@luxintlgrourp.com
- asistente.myc@magnofarmalab.com
- ben@benfieldmeetings.com
- evumj@jobssworld.com
- geearngslntbota.te@dongphuonglaw.com
- hlpocdil@pianoplaymusic.com
- hsn0ae1l@gettruefoods.com
- i3ll3cmthe@allonlinebiz.com
- ienaalcraspt.a@hmbizop.com
- info@workouthelpout.org
- issrostn@parganews.com
- jktescra@dkbijuteri.com
- m6ocnai@casasmason.com
- ogyetyh.tdeet@airturist.com
- otnwk.egniti@sholoanakhati.com
- pelwpohee.l@jpseuroauto.com
- rbaenzal.deb@vcnowvcr.com
- rgerenli@laurarogeau.com
- rznkacob@premiumtv-ott.com
- sales@citygatesbmt.com
- toatrnlw@vehamedia.com
- y1rsitch3@askcolleenking.com
MD5
- 014a9413974bef4f558e92cb71ca7193
- 0b07487f516d729b35314633d8580543
- 0e6af6ce0e576010a5c91c455f51c79c
- 18c630d608a571568d8f9a8f57b33269
- 1dc87c192633ea7e66d359781a010e47
- 270722ced97837e357562afae1cf1c0e
- 2acad354f44978cba1831d3b1d4b50a0
- 2b19cc2f3b0279bb2c00ca7559a060b3
- 30f49310cddd30d2ee78f3ce0ac99cf3
- 4278039595365757404886967f510be4
- 46947e783f56af12e31233c7294266ed
- 4bc7b62b59e3131a654394207606090d
- 562863a850a77bc69ba123a738290ff9
- 5ba9f14674489c8116e769a97817d3e9
- 5be5ff0d3aee0bef4590d30a1503c34f
- 5cfbc8e39d20c5f65164bdb59863f5ee
- 610b9939fe5b0788b48ae0e8a21660e5
- 62d3c60208accc885af7b7474f2af64f
- 67aa25effee60844c5e1c7c641bfb020
- 698f513f716cd995fa15590c52e60909
- 6c859d4b4b4d31441910dceefbf1daf9
- 7107306720febe26b11020549d80005e
- 804f1cf74b695fe7b34cc4054d2b8149
- 83ab5385cd7a86579d4689797ecf281e
- 907ea9cada7dafb453d17c1356060fdb
- 934f727e8504e6c28cbda5127565c581
- 98aebb69c98f6f45f00e550002340069
- a309eac50b5882d032534166a3405c0f
- a9f075ddae083bffb8b01efb013a76ff
- a9f262cfbd68b3d079b3fb99583a2710
- b4931cea44b575d192de6a967d3a53aa
- b781621f23412bf686622029195cacdc
- bb2ca2becabb5a57db9ecb53b2c572a5
- bdc6baac81416ec177efc9d1eee93a75
- c7198d78fa720735a6868aa1ab281c9a
- d2b373df1eb012c206269049e636d26f
- d7c0881ed66d985f7c0c5ffad44cb64d
- d89521adaf6418e6ebe43b1a1a9d2af9
- e32f4fef7d4816236ef029cf65d805fa
- e6ba2af18c78b98c1c2feb54456c89d1
- ea700077f404a73602a5af9da2b359f5
- eefa6c66e681f72c604557cdff760777
- f24a452723c7e5d1f85eab7f5ec7ecd9
- fa32718200a34264423982cab7ea95d3