Overview

overview

10

Static

static

ellth1.dll

windows7_x64

10

ellth1.dll

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    ellth1.dll
  • Size 565KB
  • Sample210202-v26fsnvpea
  • SHA256 d4c575a5d522c8e2cc79685a526ce185d021aef9299c019b0ac52c4e10769ccf
  • MD5 SHA1 SHA512
Score
10/10
qakbotkrk011611569149bankerstealertrojan

Malware Config

Extracted

Family

  • qakbot

Botnet

  • krk01

Campaign

  • 1611569149

C2

  • 31.5.21.66:995

  • 89.3.198.238:443

  • 202.188.138.162:443

  • 188.24.128.253:443

  • 175.141.219.71:443

  • 151.60.15.183:443

  • 184.189.122.72:443

  • 80.227.5.70:443

  • 140.82.49.12:443

  • 89.211.241.100:995

  • 81.97.154.100:443

  • 77.27.174.49:995

  • 92.154.83.96:2078

  • 42.3.8.54:443

  • 71.187.170.235:443

  • 46.153.36.53:995

  • 71.182.142.63:443

  • 105.186.102.16:443

  • 50.244.112.106:443

  • 78.63.226.32:443

Targets

    • Target
      ellth1.dll
    • Size 565KB
    • SHA256 d4c575a5d522c8e2cc79685a526ce185d021aef9299c019b0ac52c4e10769ccf
    • MD5 SHA1 SHA512
    Score
    10/10
    qakbotkrk011611569149bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks