Overview

overview

10

Static

static

e12ddd80a5...f9.dll

windows7_x64

10

e12ddd80a5...f9.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e12ddd80a58015901d29106649c9d37e06df40bdae271488f5b03ec0af7a8ff9

  • Size

    412KB

  • Sample

    210310-4jwsp1mbcj

  • MD5

    988c786def941005de34dd9748c42568

  • SHA1

    f5fd35e6460c2b351d36f92314e27c72c9f1070d

  • SHA256

    e12ddd80a58015901d29106649c9d37e06df40bdae271488f5b03ec0af7a8ff9

  • SHA512

    b2237fbf1164a04eff173f35e0abf40d30ad5d8198842d080035af417835a4672f8f117f65f9d2308a1c02d0321fa059ff23f1f6978c6e67b5a7a3280394516b

Score
10/10
qakbotbiden101615296616bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

biden10

Campaign

1615296616

C2

79.115.174.55:443

196.151.252.84:443

24.229.150.54:995

24.117.107.120:443

106.51.85.162:443

90.65.236.181:2222

184.189.122.72:443

47.196.192.184:443

136.232.34.70:443

80.227.5.69:443

195.12.154.8:443

105.198.236.101:443

190.85.91.154:443

83.110.103.152:443

83.196.56.65:2222

24.139.72.117:443

24.55.112.61:443

47.22.148.6:443

86.220.62.251:2222

83.110.9.71:2222

Targets

    • Target

      e12ddd80a58015901d29106649c9d37e06df40bdae271488f5b03ec0af7a8ff9

    • Size

      412KB

    • MD5

      988c786def941005de34dd9748c42568

    • SHA1

      f5fd35e6460c2b351d36f92314e27c72c9f1070d

    • SHA256

      e12ddd80a58015901d29106649c9d37e06df40bdae271488f5b03ec0af7a8ff9

    • SHA512

      b2237fbf1164a04eff173f35e0abf40d30ad5d8198842d080035af417835a4672f8f117f65f9d2308a1c02d0321fa059ff23f1f6978c6e67b5a7a3280394516b

    Score
    10/10
    qakbotbiden101615296616bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks