Overview

overview

10

Static

static

bb68ae7a6f...42.dll

windows7_x64

10

bb68ae7a6f...42.dll

windows10_x64

10

Resubmissions

18-01-2021 13:42

210118-t3a5wwmqmx 10

14-01-2021 16:18

210114-2yhm3k7c9e 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bb68ae7a6f47f4e51b012478f80ddc8ec98ed7dd1254a2f35c8ccc6eaf5c9442

  • Size

    337KB

  • Sample

    210118-t3a5wwmqmx

  • MD5

    aef3a7327144dcb8c4691074947eccc0

  • SHA1

    b37f7b0e1d69b18dfe2ab5dd617967249f561663

  • SHA256

    bb68ae7a6f47f4e51b012478f80ddc8ec98ed7dd1254a2f35c8ccc6eaf5c9442

  • SHA512

    7428585664a21b22a3071358c588ba69da0fdadcff1ac396eee29aca868094aed212f286ddd43961189291f2e6b5da5eb66c9a9d8c1a84b1ce48884cf117ccfc

Score
10/10
qakbotabc1061606896670bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

abc106

Campaign

1606896670

C2

203.106.195.67:443

58.152.9.133:443

67.61.157.208:443

211.24.72.253:443

82.10.43.130:2222

200.75.136.78:443

120.159.238.185:2222

196.151.252.84:443

105.198.236.101:443

197.161.154.132:443

79.172.26.240:443

41.233.153.21:993

103.102.100.78:2222

82.223.205.216:443

90.23.117.67:2222

81.214.126.173:2222

95.56.177.11:995

217.128.117.218:2222

185.163.221.77:2222

120.151.95.167:443

Targets

    • Target

      bb68ae7a6f47f4e51b012478f80ddc8ec98ed7dd1254a2f35c8ccc6eaf5c9442

    • Size

      337KB

    • MD5

      aef3a7327144dcb8c4691074947eccc0

    • SHA1

      b37f7b0e1d69b18dfe2ab5dd617967249f561663

    • SHA256

      bb68ae7a6f47f4e51b012478f80ddc8ec98ed7dd1254a2f35c8ccc6eaf5c9442

    • SHA512

      7428585664a21b22a3071358c588ba69da0fdadcff1ac396eee29aca868094aed212f286ddd43961189291f2e6b5da5eb66c9a9d8c1a84b1ce48884cf117ccfc

    Score
    10/10
    qakbotabc1061606896670bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks