Overview

overview

10

Static

static

44264.6779...xe.dll

windows7_x64

10

44264.6779...xe.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44264.6779061343.exe

  • Size

    412KB

  • Sample

    210309-qfavg3hy66

  • MD5

    eeba2e85b078dc9dcd7c662d5dfd952f

  • SHA1

    ca85540ae96d43dd2045a99b820b92387c531ca9

  • SHA256

    3cfbfeac99233bdbe88a94f5ebd5bf4642a223d5afd0854caeb18302cdf9215b

  • SHA512

    536b6b637fe09f4d149d6cf8ca1c75b5a4e0fe98613e9df8279a6cd6327325338fef844b83f956de70dd7a7c1642f256c38e497c132c3355f138511468550ee1

Score
10/10
qakbotbiden101615296616bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

biden10

Campaign

1615296616

C2

79.115.174.55:443

196.151.252.84:443

24.229.150.54:995

24.117.107.120:443

106.51.85.162:443

90.65.236.181:2222

184.189.122.72:443

47.196.192.184:443

136.232.34.70:443

80.227.5.69:443

195.12.154.8:443

105.198.236.101:443

190.85.91.154:443

83.110.103.152:443

83.196.56.65:2222

24.139.72.117:443

24.55.112.61:443

47.22.148.6:443

86.220.62.251:2222

83.110.9.71:2222

Targets

    • Target

      44264.6779061343.exe

    • Size

      412KB

    • MD5

      eeba2e85b078dc9dcd7c662d5dfd952f

    • SHA1

      ca85540ae96d43dd2045a99b820b92387c531ca9

    • SHA256

      3cfbfeac99233bdbe88a94f5ebd5bf4642a223d5afd0854caeb18302cdf9215b

    • SHA512

      536b6b637fe09f4d149d6cf8ca1c75b5a4e0fe98613e9df8279a6cd6327325338fef844b83f956de70dd7a7c1642f256c38e497c132c3355f138511468550ee1

    Score
    10/10
    qakbotbiden101615296616bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks