Overview

overview

10

Static

static

44313_6048...at.dll

windows7_x64

10

44313_6048...at.dll

windows10_x64

10

Resubmissions

07-05-2021 08:01

210507-bbr5n76zrn 10

06-05-2021 13:54

210506-qjhprrfq56 1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44313,6048108796.dat

  • Size

    839KB

  • Sample

    210507-bbr5n76zrn

  • MD5

    91fc8a03b1feaf21b3243ed08713ed8e

  • SHA1

    e020e7a65146d52860197c295492c947a4d7608c

  • SHA256

    e6310432b75e3c0013fc39d51da6590c4aff5e5ba35ad5da63694f660359765b

  • SHA512

    0e27f67b385a7181d3a919565569c1e2b05e3f32eac910b41edee2809730505759efcc9aea49ed86c587ae07a08387d4eccf0ae8ef74ea31127915dc14566629

Score
10/10
qakbotbiden391620299739bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

biden39

Campaign

1620299739

C2

71.187.170.235:443

190.85.91.154:443

47.22.148.6:443

95.77.223.148:443

75.67.192.125:443

83.110.108.100:2222

81.97.154.100:443

97.69.160.4:2222

24.179.77.148:443

45.63.107.192:995

24.152.219.253:995

67.8.103.21:443

71.41.184.10:3389

184.185.103.157:443

73.25.124.140:2222

140.82.49.12:443

197.45.110.165:995

149.28.101.90:443

45.77.115.208:995

207.246.116.237:8443

Targets

    • Target

      44313,6048108796.dat

    • Size

      839KB

    • MD5

      91fc8a03b1feaf21b3243ed08713ed8e

    • SHA1

      e020e7a65146d52860197c295492c947a4d7608c

    • SHA256

      e6310432b75e3c0013fc39d51da6590c4aff5e5ba35ad5da63694f660359765b

    • SHA512

      0e27f67b385a7181d3a919565569c1e2b05e3f32eac910b41edee2809730505759efcc9aea49ed86c587ae07a08387d4eccf0ae8ef74ea31127915dc14566629

    Score
    10/10
    qakbotbiden391620299739bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks