Overview

overview

10

Static

static

SecuriteIn...96.dll

windows7_x64

10

SecuriteIn...96.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.Variant.Razy.831269.32121.17096

  • Size

    1.5MB

  • Sample

    210122-y7j51ka2hn

  • MD5

    ec1bbb6aa9645e19917acba136b6db12

  • SHA1

    4224b65b12969f9f81b7c5fd696e0f3fb8fecada

  • SHA256

    ca2afc4cffc70af1906c57aa6a86950e57c2688181a7673c93e97385edbfecdd

  • SHA512

    b0749e8f528a5435cc883826d44dfb92ae54ece062244dfd06e1d226545d408f30e8b6781186959704e221ec19249c284c019041b08e66c9cad4c4a6b6295d92

Score
10/10
qakbotabc1191611224824bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

abc119

Campaign

1611224824

C2

106.51.52.111:443

83.110.12.140:2222

89.3.198.238:443

86.220.60.133:2222

45.77.115.208:8443

45.77.115.208:995

71.117.132.169:443

82.76.47.211:443

125.63.101.62:443

86.98.93.124:2078

178.152.70.12:995

78.97.207.104:443

77.27.174.49:995

173.70.165.101:995

64.121.114.87:443

188.24.128.253:443

89.137.211.239:995

80.227.5.70:443

81.97.154.100:443

98.121.187.78:443

Targets

    • Target

      SecuriteInfo.com.Variant.Razy.831269.32121.17096

    • Size

      1.5MB

    • MD5

      ec1bbb6aa9645e19917acba136b6db12

    • SHA1

      4224b65b12969f9f81b7c5fd696e0f3fb8fecada

    • SHA256

      ca2afc4cffc70af1906c57aa6a86950e57c2688181a7673c93e97385edbfecdd

    • SHA512

      b0749e8f528a5435cc883826d44dfb92ae54ece062244dfd06e1d226545d408f30e8b6781186959704e221ec19249c284c019041b08e66c9cad4c4a6b6295d92

    Score
    10/10
    qakbotabc1191611224824bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks