Overview

overview

10

Static

static

bf4a01bdb1...3a.dll

windows7_x64

10

bf4a01bdb1...3a.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bf4a01bdb10b150c7db52a797ed62cd672186bdecd5b3a80b058dd35dbd3893a

  • Size

    412KB

  • Sample

    210310-qr2ffb716x

  • MD5

    89cad94816346d793c113ce5387d5b72

  • SHA1

    de7b6c243ae71b8f744ca88af5aa1154d46790fc

  • SHA256

    bf4a01bdb10b150c7db52a797ed62cd672186bdecd5b3a80b058dd35dbd3893a

  • SHA512

    c4633b6980c6629ce46776ddf4b532a2f40f4d28760db36123a4367afb2004c3ca310cfe1fa1c45f64762af69b02cc7cc26bf8010b738475c7fe1e168f1e89c0

Score
10/10
qakbotbiden101615296616bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

biden10

Campaign

1615296616

C2

79.115.174.55:443

196.151.252.84:443

24.229.150.54:995

24.117.107.120:443

106.51.85.162:443

90.65.236.181:2222

184.189.122.72:443

47.196.192.184:443

136.232.34.70:443

80.227.5.69:443

195.12.154.8:443

105.198.236.101:443

190.85.91.154:443

83.110.103.152:443

83.196.56.65:2222

24.139.72.117:443

24.55.112.61:443

47.22.148.6:443

86.220.62.251:2222

83.110.9.71:2222

Targets

    • Target

      bf4a01bdb10b150c7db52a797ed62cd672186bdecd5b3a80b058dd35dbd3893a

    • Size

      412KB

    • MD5

      89cad94816346d793c113ce5387d5b72

    • SHA1

      de7b6c243ae71b8f744ca88af5aa1154d46790fc

    • SHA256

      bf4a01bdb10b150c7db52a797ed62cd672186bdecd5b3a80b058dd35dbd3893a

    • SHA512

      c4633b6980c6629ce46776ddf4b532a2f40f4d28760db36123a4367afb2004c3ca310cfe1fa1c45f64762af69b02cc7cc26bf8010b738475c7fe1e168f1e89c0

    Score
    10/10
    qakbotbiden101615296616bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks