Rewterz Threat Alert – Qakbot (Qbot) Malware – Active IOCs - Rewterz
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Financial Theft - T1657 Malware - T1587.001 Malware - T1588.001 Phishing - T1660 Phishing - T1566
Show in Graph
Common Information
Type Value
UUID 99c5eef1-4e93-4c86-9ea7-319e9fe1bd10
Fingerprint 67c525c9a8dde74f
Analysis status DONE
Considered CTI value 2
Text language
Published Sept. 14, 2022, 12:36 p.m.
Added to db Dec. 19, 2024, 9:29 a.m.
Last updated Dec. 19, 2024, 9:30 a.m.
Headline Rewterz Threat Alert – Qakbot (Qbot) Malware – Active IOCs
Title Rewterz Threat Alert – Qakbot (Qbot) Malware – Active IOCs - Rewterz
Detected Hints/Tags/Attributes 29/2/16
Source URLs
Redirection Url
Details Source https://www.rewterz.com/rewterz-news/rewterz-threat-alert-qakbot-qbot-malware-active-iocs-42
URL Provider
Details Provider Source level domain
Details rewterz.com www.rewterz.com
Attributes
Details Type #Events CTI Value
Details Domain 1 
aadamrealestate.com
Details Domain 1 
scavassarts.tk
Details Domain 1 
starhealthconsultancy.com
Details Email 1 
a.ynanomrl@aadamrealestate.com
Details md5 1 
a0601b3e1fd6368aa442b9862ec0e8d9
Details sha1 1 
28fd860157ae6482e38532460822dfb8a3de5332
Details sha256 1 
0f1f9fe237c9af1cd92150f3edfd0fe55d6aac438c16c13cdf0a526e17799bb3
Details IPv4 1 
41.97.64.224
Details IPv4 1 
191.97.234.238
Details IPv4 1 
89.211.219.157
Details IPv4 4 
193.3.19.37
Details IPv4 1 
70.51.137.118
Details IPv4 2 
99.232.140.205
Details IPv4 1 
175.110.231.67
Details Url 1 
https://scavassarts.tk/orn/sercopiaruomr
Details Url 1 
https://starhealthconsultancy.com/tu/tusicncheni