Overview

overview

10

Static

static

f512a1ae9f...44.dll

windows7_x64

10

f512a1ae9f...44.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f512a1ae9f24a56c38b1be8519037ef71b7392b497d40e287ac3252bcee37a44

  • Size

    342KB

  • Sample

    210430-yvzrz3n1gn

  • MD5

    e3082189a2125000ee31c5e30a2eaf6e

  • SHA1

    a53a303da350843229e51ddfe52adab07c70dcec

  • SHA256

    f512a1ae9f24a56c38b1be8519037ef71b7392b497d40e287ac3252bcee37a44

  • SHA512

    b6b40259a54cab59fd7eaa05587a65ca08094477c54aa2b950595acc18cbcfcf78549681db4ad463dfe5a04ac7b147c5199e696c6fc1d82a8216f054d049e7ef

Score
10/10
qakbotabc106m1606921461bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

401.51

Botnet

abc106m

Campaign

1606921461

C2

94.69.242.254:2222

189.140.45.48:995

37.182.244.124:2222

73.136.242.114:443

187.149.126.53:443

189.210.115.207:443

96.27.47.70:2222

185.163.221.77:2222

85.132.36.111:2222

178.87.10.110:443

120.150.218.241:995

68.224.121.148:993

78.101.145.96:61201

47.146.34.236:443

24.95.61.62:443

72.29.181.78:2222

93.113.177.152:443

87.218.53.206:2222

106.51.85.162:443

2.90.33.130:443

Targets

    • Target

      f512a1ae9f24a56c38b1be8519037ef71b7392b497d40e287ac3252bcee37a44

    • Size

      342KB

    • MD5

      e3082189a2125000ee31c5e30a2eaf6e

    • SHA1

      a53a303da350843229e51ddfe52adab07c70dcec

    • SHA256

      f512a1ae9f24a56c38b1be8519037ef71b7392b497d40e287ac3252bcee37a44

    • SHA512

      b6b40259a54cab59fd7eaa05587a65ca08094477c54aa2b950595acc18cbcfcf78549681db4ad463dfe5a04ac7b147c5199e696c6fc1d82a8216f054d049e7ef

    Score
    10/10
    qakbotabc106m1606921461bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks