2023-04-03 (MONDAY) - IOC UPDATE: QAKBOT (QBOT) TCP PORT 65400 TRAFFIC CHANGES IP ADDRESS
- Today (2023-04-03), TCP port 65400 traffic generated by Qakbot started going to 172.107.98[.]3.
- Today's pcap has been carved and sanitized, but it's still the same host infected with Qakbot from 2023-03-31.
- Zip files are password-protected. If you don't know the password, see the "about" page of this website.
- 2023-04-03-obama247-Qakbot-traffic.pcap.zip 918 kB (917,721 bytes)
Click here to return to the main page.