Overview

overview

10

Static

static

b98890d541...46.dll

windows7_x64

10

b98890d541...46.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b98890d54156f237f93ffc29789577b68e90871fb6d00b73088900c0cdcf4346

  • Size

    692KB

  • Sample

    210423-n9w4sw56be

  • MD5

    bc7a5e82c875bed2182fa8dedacfacae

  • SHA1

    1365c8d38ad0518d12fcc3fd1732e2c2e737b429

  • SHA256

    b98890d54156f237f93ffc29789577b68e90871fb6d00b73088900c0cdcf4346

  • SHA512

    cee7f93fba61197a02eaeba72431fc3b875d98b0ae38d5adab56a1c813e19df62a0499b273443dbefb197ed84d7f71564bcccf4f5fd0d5bd217f51256db451e6

Score
10/10
qakbotnotset1618398961bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.12

Botnet

notset

Campaign

1618398961

C2

47.196.192.184:443

216.201.162.158:443

136.232.34.70:443

71.41.184.10:3389

140.82.49.12:443

45.63.107.192:2222

45.63.107.192:443

149.28.98.196:443

45.32.211.207:443

144.202.38.185:443

45.77.115.208:2222

45.77.115.208:8443

207.246.116.237:995

45.77.117.108:443

149.28.99.97:443

149.28.99.97:995

149.28.98.196:995

45.32.211.207:995

45.32.211.207:2222

149.28.98.196:2222

Targets

    • Target

      b98890d54156f237f93ffc29789577b68e90871fb6d00b73088900c0cdcf4346

    • Size

      692KB

    • MD5

      bc7a5e82c875bed2182fa8dedacfacae

    • SHA1

      1365c8d38ad0518d12fcc3fd1732e2c2e737b429

    • SHA256

      b98890d54156f237f93ffc29789577b68e90871fb6d00b73088900c0cdcf4346

    • SHA512

      cee7f93fba61197a02eaeba72431fc3b875d98b0ae38d5adab56a1c813e19df62a0499b273443dbefb197ed84d7f71564bcccf4f5fd0d5bd217f51256db451e6

    Score
    10/10
    qakbotnotset1618398961bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks