Overview

overview

10

Static

static

44260.8523...pg.dll

windows7_x64

10

44260.8523...pg.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44260.8523962963.jpg

  • Size

    347KB

  • Sample

    210305-j1kav3grss

  • MD5

    6de3cf69bbd1d61ab9846c89ab6ede7f

  • SHA1

    b1934561a7ba7f6263c7a10902bec50372d3b8e8

  • SHA256

    e8a186447b6d056ad6a42274db5550512c57699bd123bfc49343135d39b0ff2a

  • SHA512

    4a0bb789c6af608d9ab872b4b86c386a1ca312184ae86c2cfb6e44a3375714bb05867fa550506a685d4beab50bac1f92e4b5222631650dd3ab4ff2730ec7d286

Score
10/10
qakbotbiden031614851222bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

biden03

Campaign

1614851222

C2

81.97.154.100:443

92.59.35.196:2222

197.161.154.132:443

75.136.26.147:443

71.117.132.169:443

78.63.226.32:443

193.248.221.184:2222

75.67.192.125:443

83.110.9.71:2222

47.22.148.6:443

89.3.198.238:443

2.232.253.79:995

45.63.107.192:2222

207.246.77.75:443

45.32.211.207:8443

207.246.77.75:8443

45.32.211.207:995

149.28.98.196:443

149.28.99.97:2222

149.28.98.196:995

Targets

    • Target

      44260.8523962963.jpg

    • Size

      347KB

    • MD5

      6de3cf69bbd1d61ab9846c89ab6ede7f

    • SHA1

      b1934561a7ba7f6263c7a10902bec50372d3b8e8

    • SHA256

      e8a186447b6d056ad6a42274db5550512c57699bd123bfc49343135d39b0ff2a

    • SHA512

      4a0bb789c6af608d9ab872b4b86c386a1ca312184ae86c2cfb6e44a3375714bb05867fa550506a685d4beab50bac1f92e4b5222631650dd3ab4ff2730ec7d286

    Score
    10/10
    qakbotbiden031614851222bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks