Overview

overview

10

Static

static

izmub.dll

windows7_x64

10

izmub.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    izmub.dll

  • Size

    298KB

  • Sample

    210205-sxkm4bd4v6

  • MD5

    effdfe39d8b909df48eb2d916a52aada

  • SHA1

    9caab755d5538de5ba7c85ea9f5c1efed470ddeb

  • SHA256

    34151c3659105a2c59f1fd7d106451f8a8f89e6873235ecacd6428a746a16e6b

  • SHA512

    c307c045ad080ec6f15fedb39e833efd2f7a93bd520e9ddaa48242bae2d7cd93e8c28a5e37c3d9f8e80bf13e2c23db046dd6359a58df7a81ca4e994f35eb1da0

Score
10/10
qakbotabc1231612275762bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

abc123

Campaign

1612275762

C2

196.151.252.84:443

216.201.162.158:443

83.110.12.140:2222

105.186.102.16:443

108.31.15.10:995

193.248.221.184:2222

68.225.60.77:995

197.45.110.165:995

89.3.198.238:443

81.97.154.100:443

81.214.126.173:2222

108.46.145.30:443

71.187.170.235:443

72.240.200.181:2222

81.88.254.62:443

98.240.24.57:443

86.97.8.249:443

75.136.40.155:443

79.129.121.81:995

37.211.90.175:995

Targets

    • Target

      izmub.dll

    • Size

      298KB

    • MD5

      effdfe39d8b909df48eb2d916a52aada

    • SHA1

      9caab755d5538de5ba7c85ea9f5c1efed470ddeb

    • SHA256

      34151c3659105a2c59f1fd7d106451f8a8f89e6873235ecacd6428a746a16e6b

    • SHA512

      c307c045ad080ec6f15fedb39e833efd2f7a93bd520e9ddaa48242bae2d7cd93e8c28a5e37c3d9f8e80bf13e2c23db046dd6359a58df7a81ca4e994f35eb1da0

    Score
    10/10
    qakbotabc1231612275762bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks