Overview

overview

10

Static

static

ce7b85fa20...18.dll

windows7_x64

ce7b85fa20...18.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce7b85fa201d555acb43e47849cfd3de653234222167c7a7c680944c0c5d9318

  • Size

    337KB

  • Sample

    210114-amhazl3bpn

  • MD5

    05619c6955da2faf470946573762dcdc

  • SHA1

    e5e724cb4478ba307bcc44206ff715ca2a2c12df

  • SHA256

    ce7b85fa201d555acb43e47849cfd3de653234222167c7a7c680944c0c5d9318

  • SHA512

    2dfdd6d93228e5f7b652bbfb9d146e59c7d43c9cf1587637e1ea25e6ee55c815ebaa6bb5158f9e80b1eebcada337f21d1d28a8e63c913426ed66fde5582f06cf

Score
10/10
qakbotabc1061606896670bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

abc106

Campaign

1606896670

C2

203.106.195.67:443

58.152.9.133:443

67.61.157.208:443

211.24.72.253:443

82.10.43.130:2222

200.75.136.78:443

120.159.238.185:2222

196.151.252.84:443

105.198.236.101:443

197.161.154.132:443

79.172.26.240:443

41.233.153.21:993

103.102.100.78:2222

82.223.205.216:443

90.23.117.67:2222

81.214.126.173:2222

95.56.177.11:995

217.128.117.218:2222

185.163.221.77:2222

120.151.95.167:443

Targets

    • Target

      ce7b85fa201d555acb43e47849cfd3de653234222167c7a7c680944c0c5d9318

    • Size

      337KB

    • MD5

      05619c6955da2faf470946573762dcdc

    • SHA1

      e5e724cb4478ba307bcc44206ff715ca2a2c12df

    • SHA256

      ce7b85fa201d555acb43e47849cfd3de653234222167c7a7c680944c0c5d9318

    • SHA512

      2dfdd6d93228e5f7b652bbfb9d146e59c7d43c9cf1587637e1ea25e6ee55c815ebaa6bb5158f9e80b1eebcada337f21d1d28a8e63c913426ed66fde5582f06cf

    Score
    10/10
    qakbotabc1061606896670bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks