Overview

overview

10

Static

static

c2a97b46f2...d8.dll

windows7_x64

10

c2a97b46f2...d8.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c2a97b46f2f9faf0dda8e31886216023abe77ae5de98a0caf6fe1bbb773caad8

  • Size

    412KB

  • Sample

    210309-zggffdvbbj

  • MD5

    8a4f0da8227f5214b4665755bcb64cc3

  • SHA1

    d2a74c2bc6e7afcfa33c7585dd3960dbbf19e5b7

  • SHA256

    c2a97b46f2f9faf0dda8e31886216023abe77ae5de98a0caf6fe1bbb773caad8

  • SHA512

    04f22f6122b5e7c4570d9b8e43b3b8907d2fbfa409f3ba0c211e6a912b9262346af8e96a8312966a15a2ba5e2fd20a087783733466c3df15c053213bb356cd0a

Score
10/10
qakbotbiden101615296616bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

biden10

Campaign

1615296616

C2

79.115.174.55:443

196.151.252.84:443

24.229.150.54:995

24.117.107.120:443

106.51.85.162:443

90.65.236.181:2222

184.189.122.72:443

47.196.192.184:443

136.232.34.70:443

80.227.5.69:443

195.12.154.8:443

105.198.236.101:443

190.85.91.154:443

83.110.103.152:443

83.196.56.65:2222

24.139.72.117:443

24.55.112.61:443

47.22.148.6:443

86.220.62.251:2222

83.110.9.71:2222

Targets

    • Target

      c2a97b46f2f9faf0dda8e31886216023abe77ae5de98a0caf6fe1bbb773caad8

    • Size

      412KB

    • MD5

      8a4f0da8227f5214b4665755bcb64cc3

    • SHA1

      d2a74c2bc6e7afcfa33c7585dd3960dbbf19e5b7

    • SHA256

      c2a97b46f2f9faf0dda8e31886216023abe77ae5de98a0caf6fe1bbb773caad8

    • SHA512

      04f22f6122b5e7c4570d9b8e43b3b8907d2fbfa409f3ba0c211e6a912b9262346af8e96a8312966a15a2ba5e2fd20a087783733466c3df15c053213bb356cd0a

    Score
    10/10
    qakbotbiden101615296616bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks