Overview

overview

10

Static

static

8c4b601938...xe.dll

windows7_x64

10

8c4b601938...xe.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8c4b601938850ae85f6faea32989b6d4cb28cbc9b7711ef0a32a05442003b023.zip

  • Size

    154KB

  • Sample

    201206-pk5ncx131x

  • MD5

    c0668ede389c4c39d611aec74ed22d3c

  • SHA1

    0de36760f47b716ac586ba6999263a213f54383c

  • SHA256

    4bd20796670a735c190f05ef0024963a2004be0029093b4d045937f2ee9080d5

  • SHA512

    7efaa831c17dfb1e68c07da6330baba1d00b7f376b7e636c85ab9235bddec0a8f07623f25fab2fe9ea3954a87afe8ac0446a44ffac82b37c6b4a29de065d7661

Score
10/10
qakbottr021606748059bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

tr02

Campaign

1606748059

C2

197.45.110.165:995

86.99.134.235:2222

174.76.21.134:443

208.99.100.129:443

86.126.198.195:443

185.105.131.233:443

85.132.36.111:2222

105.198.236.101:443

2.49.219.254:22

217.165.2.92:995

67.6.54.180:443

5.193.115.251:2222

83.196.50.197:2222

89.3.198.238:443

94.141.3.242:443

73.239.229.107:995

217.165.15.245:2222

68.225.60.77:995

85.121.42.12:443

99.240.226.2:443

Targets

    • Target

      8c4b601938850ae85f6faea32989b6d4cb28cbc9b7711ef0a32a05442003b023.exe

    • Size

      249KB

    • MD5

      bf8e148474128895d41dfd384578c648

    • SHA1

      dd87608e706f9d99fe75937723ecea5460fb1afb

    • SHA256

      8c4b601938850ae85f6faea32989b6d4cb28cbc9b7711ef0a32a05442003b023

    • SHA512

      cd6f8831622faec9720b7588d6827ac33e2914210396138e23bf4e8ce5ff93b100a7fd29e7118abe45dee5583840fbc408f1c80a350b9e3803f164195c20438e

    Score
    10/10
    qakbottr021606748059bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks