Overview

overview

10

Static

static

SecuriteIn...44.dll

windows7_x64

10

SecuriteIn...44.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Variant.Razy.831269.8387.7344

  • Size

    1.5MB

  • Sample

    210122-bet98x9526

  • MD5

    3b322b43ce402d24aa2e7740a4c1a228

  • SHA1

    3d3b3e5f9ca28c17ce02bdea3e6b697749ade04d

  • SHA256

    39012a1dc5ba702679b12a81d708f1d15d32be2f8c48746645e62e3fd4aa8d93

  • SHA512

    330126a5648e3803a06b984197387339453545db16af7b95868d4a4ec45f6eb32bfeb133e9c880888d65ce7a28674153b929d20bb68a772976bb817664fb1969

Score
10/10
qakbotabc1191611224824bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

abc119

Campaign

1611224824

C2

106.51.52.111:443

83.110.12.140:2222

89.3.198.238:443

86.220.60.133:2222

45.77.115.208:8443

45.77.115.208:995

71.117.132.169:443

82.76.47.211:443

125.63.101.62:443

86.98.93.124:2078

178.152.70.12:995

78.97.207.104:443

77.27.174.49:995

173.70.165.101:995

64.121.114.87:443

188.24.128.253:443

89.137.211.239:995

80.227.5.70:443

81.97.154.100:443

98.121.187.78:443

Targets

    • Target

      SecuriteInfo.com.Variant.Razy.831269.8387.7344

    • Size

      1.5MB

    • MD5

      3b322b43ce402d24aa2e7740a4c1a228

    • SHA1

      3d3b3e5f9ca28c17ce02bdea3e6b697749ade04d

    • SHA256

      39012a1dc5ba702679b12a81d708f1d15d32be2f8c48746645e62e3fd4aa8d93

    • SHA512

      330126a5648e3803a06b984197387339453545db16af7b95868d4a4ec45f6eb32bfeb133e9c880888d65ce7a28674153b929d20bb68a772976bb817664fb1969

    Score
    10/10
    qakbotabc1191611224824bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks