2023-04-03 (MONDAY) - IOC UPDATE: QAKBOT (QBOT) TCP PORT 65400 TRAFFIC CHANGES IP ADDRESS
NOTICE:
- The zip archives on this page have been updated, and they now use the new password scheme. For the new password, see the "about" page of this website.
REFERENCE:
NOTES:
- Today (2023-04-03), TCP port 65400 traffic generated by Qakbot started going to 172.107.98[.]3.
- Today's pcap has been carved and sanitized, but it's still the same host infected with Qakbot from 2023-03-31.
ASSOCIATED FILES:
- 2023-04-03-obama247-Qakbot-traffic.pcap.zip 918 kB (917,721 bytes)
Click here to return to the main page.