Overview

overview

10

Static

static

555555555555.png.exe

windows7_x64

10

555555555555.png.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    555555555555.png.exe
  • Size 1.0MB
  • Sample200917-cssz9xhj6e
  • SHA256 f3e3d35760f655af5a57029b73c2cc2f42d09de1a694b2eb22366a3e6c49a068
  • MD5 SHA1 SHA512
Score
10/10
qakbotabc0041600240826bankerstealertrojan

Malware Config

Extracted

Family

  • qakbot

Botnet

  • abc004

Campaign

  • 1600240826

C2

  • 96.227.127.13:443

  • 98.22.65.76:443

  • 67.165.206.193:993

  • 50.244.112.10:995

  • 72.204.242.138:465

  • 72.36.59.46:2222

  • 68.174.15.223:443

  • 69.11.247.242:443

  • 75.81.25.223:443

  • 95.77.223.148:443

  • 47.146.32.175:443

  • 50.232.172.114:443

  • 24.231.54.185:2222

  • 184.180.157.203:2222

  • 190.31.192.182:443

  • 84.47.220.117:995

  • 96.18.240.158:443

  • 117.199.14.80:443

  • 184.97.148.2:443

  • 207.255.161.8:993

Targets

    • Target
      555555555555.png.exe
    • Size 1.0MB
    • SHA256 f3e3d35760f655af5a57029b73c2cc2f42d09de1a694b2eb22366a3e6c49a068
    • MD5 SHA1 SHA512
    Score
    10/10
    trojanbankerstealerqakbot

    • Qakbot/Qbot

      Qbot or Qakbot is a sophisticated worm with banking capabilities.

      trojanbankerstealerqakbot

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks