Overview

overview

10

Static

static

904400.dll

windows7_x64

10

904400.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    904400.dll

  • Size

    289KB

  • Sample

    201215-2qj753rhyx

  • MD5

    849036c1ab456c53d6e871df262e0958

  • SHA1

    4d3d76f4d7ebcb9f4b3f258c079040cbcb8fdc82

  • SHA256

    d5d942ddb8b2d94691f043eb6059d5dd0a2ab658fa0c66132ded768c1fcc729b

  • SHA512

    9031e4116f65240b2627716c263069b62bfa44ba95f0efa88268ebb98c3c40ee8606649e5f855d6f025109d33303a3e052a1f98089253739f9621768e03e5cd4

Score
10/10
qakbotabc1041606818862bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

abc104

Campaign

1606818862

C2

79.119.124.237:443

87.218.53.206:2222

181.169.88.203:443

82.12.157.95:995

94.49.188.240:443

46.124.107.124:6881

86.122.248.164:2222

83.202.68.220:2222

79.129.216.215:2222

37.21.231.245:995

47.187.49.3:2222

2.90.33.130:443

149.28.98.196:995

149.28.99.97:443

45.63.107.192:995

149.28.98.196:2222

45.63.107.192:2222

74.73.27.35:443

149.28.98.196:443

144.202.38.185:2222

Targets

    • Target

      904400.dll

    • Size

      289KB

    • MD5

      849036c1ab456c53d6e871df262e0958

    • SHA1

      4d3d76f4d7ebcb9f4b3f258c079040cbcb8fdc82

    • SHA256

      d5d942ddb8b2d94691f043eb6059d5dd0a2ab658fa0c66132ded768c1fcc729b

    • SHA512

      9031e4116f65240b2627716c263069b62bfa44ba95f0efa88268ebb98c3c40ee8606649e5f855d6f025109d33303a3e052a1f98089253739f9621768e03e5cd4

    Score
    10/10
    qakbotabc1041606818862bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks