Overview

overview

10

Static

static

87b3f4a298...ea.dll

windows7_x64

10

87b3f4a298...ea.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    87b3f4a29899b54763d5a73a7e0483ea.dll

  • Size

    485KB

  • Sample

    210504-98bq96w7jx

  • MD5

    87b3f4a29899b54763d5a73a7e0483ea

  • SHA1

    75dfb32188c588f1e24abfc8af53f138740aa7b1

  • SHA256

    4920b2f647aa16bd4e806c88a1af679fbfec0c6790372ceb878efa787a5e55bb

  • SHA512

    0a8a9c5b053c886068fad0abead50bfeee7b7900fe0b5dfbc2ea284f626cf959b568f4a0b1cea01868367a929166811a8a2bfc6b5422c4a8a96b597c1a0b709e

Score
10/10
qakbottr1618935072bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.12

Botnet

tr

Campaign

1618935072

C2

140.82.49.12:443

190.85.91.154:443

96.37.113.36:993

71.41.184.10:3389

186.31.46.121:443

73.25.124.140:2222

109.12.111.14:443

24.229.150.54:995

45.32.211.207:443

45.77.117.108:443

45.77.117.108:8443

149.28.98.196:443

149.28.98.196:2222

144.202.38.185:443

144.202.38.185:995

45.32.211.207:995

207.246.116.237:995

149.28.99.97:995

45.63.107.192:2222

149.28.101.90:995

Targets

    • Target

      87b3f4a29899b54763d5a73a7e0483ea.dll

    • Size

      485KB

    • MD5

      87b3f4a29899b54763d5a73a7e0483ea

    • SHA1

      75dfb32188c588f1e24abfc8af53f138740aa7b1

    • SHA256

      4920b2f647aa16bd4e806c88a1af679fbfec0c6790372ceb878efa787a5e55bb

    • SHA512

      0a8a9c5b053c886068fad0abead50bfeee7b7900fe0b5dfbc2ea284f626cf959b568f4a0b1cea01868367a929166811a8a2bfc6b5422c4a8a96b597c1a0b709e

    Score
    10/10
    qakbottr1618935072bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks