Overview

overview

10

Static

static

gaefvup.dll

windows7_x64

10

gaefvup.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    gaefvup.dll

  • Size

    255KB

  • Sample

    201217-rzwq4s8qqe

  • MD5

    d3651962f3f65ae2d14b1b3fb8da6602

  • SHA1

    af56654a48d3d23176a7ac42a4b8b83bd3222baa

  • SHA256

    772f8d1f0fa5a639f57dd886343e1567aa64e9ead5589508154a525a97e79f38

  • SHA512

    5c123d79b423b19d8249af74ac542260c491ec6dea3ed8d85af795dadb3d4910ae5412da17188d4f8c02f37201c9afbe935631d752ddffe4eb9b14df7356da4b

Score
10/10
qakbotabc1011606294013bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

abc101

Campaign

1606294013

C2

98.115.243.237:443

78.101.21.73:443

185.163.221.77:2222

2.51.246.190:995

2.50.2.11:995

175.137.79.81:443

42.201.228.106:995

185.246.9.69:995

81.133.234.36:2222

24.205.42.241:443

73.239.229.107:995

102.185.58.126:443

173.245.152.231:443

105.101.216.210:443

89.137.195.167:995

174.76.21.134:443

41.238.217.126:6881

47.138.204.19:443

79.166.83.103:2222

92.154.83.96:1194

Targets

    • Target

      gaefvup.dll

    • Size

      255KB

    • MD5

      d3651962f3f65ae2d14b1b3fb8da6602

    • SHA1

      af56654a48d3d23176a7ac42a4b8b83bd3222baa

    • SHA256

      772f8d1f0fa5a639f57dd886343e1567aa64e9ead5589508154a525a97e79f38

    • SHA512

      5c123d79b423b19d8249af74ac542260c491ec6dea3ed8d85af795dadb3d4910ae5412da17188d4f8c02f37201c9afbe935631d752ddffe4eb9b14df7356da4b

    Score
    10/10
    qakbotabc1011606294013bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks