Jquinn147
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| evandrojv.com.br | |
| apegas.com.mx | |
| parrot-invent.com | |
| agsdwarka.com | |
| zarpashstore.com | |
| pixelmaze.in | |
| safihns.xyz | |
| therootsnshoots.com | |
| classiccarriagenl.ca | |
| abilita.com.mx |
Jquinn147
/ gist:f07529af2472cdb2d1d628696153adcb
Created
April 30, 2021 16:03
Qakbot Sheet Hashes, Week of 04/30/21
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| e3b23535bddd67b5a9efeaf341b70372fb243507d71d89253831afc086bae4fc | |
| 520c03cdc5830d7426ddf9850cdc02950e703af868bde2a1915ed71ecd3ff3cc | |
| 0a6f38e6147f7327fa3191316dcf55a3bb0dba9a6595216897ff3e8c8ea6aa03 | |
| 8d4a3a7de355ec6048392ffbf9bac79a6f6a2dcbcb37e0f171f437dff77c4b75 | |
| f23d636586be2b3e3118a772b96c1bb5010e3f6aa6fcd6124904a58f316700bd | |
| e98cd69ccec6da5c829eea288d7333bbd641ea785fee8e8a4f381b64453eb0ee | |
| 474524b5a386fedf03376829411969529573b02d20f61fe2632c0dc414d432fe | |
| 47c4d2541f4856c08010888a92b795bd2b59c8131a8bc466b88bdd2cac53ca42 | |
| b698b9cc29dcc7f7d3c097a1849a085c52784afed85ab1a7ccf7cac79a3e1c24 | |
| ae65bf7b4bf187e4f40105c496e5b9b86d39955444edff7654d91e13523690c0 |
Jquinn147
/ gist:598c1fca106bd739f27f4e8bbc50b6b3
Created
April 30, 2021 16:01
Qakbot IOCs, week of 04/30/21
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| This week, Qakbot was very busy with heavy sheet distro all days this week, except for Friday. | |
| Here's all the iocs I saw. I tried to get most of them into threatfox and Virustotal at the very least. | |
| zip domains: | |
| conejeanswear.com | |
| walkingthrutheword.com | |
| nycplumbingandsewer.com | |
| isahealthproducts.com | |
| manikratan.com |