Overview

overview

10

Static

static

2a2e0656f0...a2.dll

windows7_x64

10

2a2e0656f0...a2.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a2e0656f036e46a60f15c1259d75eeb6d26f51a9748969b37cdd28cc20343a2

  • Size

    337KB

  • Sample

    210114-vgqje8tlrj

  • MD5

    93a7bed84709385e17944885adc299dc

  • SHA1

    a8e5d9116f62c9bd475ae7cbb56aafed67cc2ce0

  • SHA256

    2a2e0656f036e46a60f15c1259d75eeb6d26f51a9748969b37cdd28cc20343a2

  • SHA512

    5ddfadeba9b6f375dcaaf15ddc7149e4e88b0da40e040971dc8d9cfc4bfbf6334e1987dcf43094f3f79e43f70d7d7afe8eebe5bf44c00accb6bb7f60ce2810d2

Score
10/10
qakbotabc1061606896670bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

abc106

Campaign

1606896670

C2

203.106.195.67:443

58.152.9.133:443

67.61.157.208:443

211.24.72.253:443

82.10.43.130:2222

200.75.136.78:443

120.159.238.185:2222

196.151.252.84:443

105.198.236.101:443

197.161.154.132:443

79.172.26.240:443

41.233.153.21:993

103.102.100.78:2222

82.223.205.216:443

90.23.117.67:2222

81.214.126.173:2222

95.56.177.11:995

217.128.117.218:2222

185.163.221.77:2222

120.151.95.167:443

Targets

    • Target

      2a2e0656f036e46a60f15c1259d75eeb6d26f51a9748969b37cdd28cc20343a2

    • Size

      337KB

    • MD5

      93a7bed84709385e17944885adc299dc

    • SHA1

      a8e5d9116f62c9bd475ae7cbb56aafed67cc2ce0

    • SHA256

      2a2e0656f036e46a60f15c1259d75eeb6d26f51a9748969b37cdd28cc20343a2

    • SHA512

      5ddfadeba9b6f375dcaaf15ddc7149e4e88b0da40e040971dc8d9cfc4bfbf6334e1987dcf43094f3f79e43f70d7d7afe8eebe5bf44c00accb6bb7f60ce2810d2

    Score
    10/10
    qakbotabc1061606896670bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks