Overview

overview

10

Static

static

9

85a340ddec...92.exe

windows7_x64

10

85a340ddec...92.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    85a340ddeca55dbac5256a38f5548b973bf7ffba22504caa6953025803dd3192

  • Size

    1.9MB

  • Sample

    210509-gnz94ww5qj

  • MD5

    5c47a7cdddd096dbf514b1f805b84f01

  • SHA1

    1ad73a441cb0420a4ff5c8262aed3f212c4f1a8e

  • SHA256

    85a340ddeca55dbac5256a38f5548b973bf7ffba22504caa6953025803dd3192

  • SHA512

    ff7f238b7e64c5d0cb9e53c3cbbd8386e21164e2914df4c27a7b79415572618aa26e4c8ef4e1589cbe54a33a88ebaf4f36eccdfd67ad735f588baccd1d9daddc

Score
10/10
qakbotspx1091588257690bankercryptonepackerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

324.136

Botnet

spx109

Campaign

1588257690

C2

68.204.164.222:443

47.185.134.79:443

31.5.21.66:443

24.27.82.216:2222

178.193.33.121:2222

96.250.113.218:443

148.75.231.53:443

50.89.14.94:443

50.108.212.180:443

184.57.17.74:443

58.108.188.231:443

47.41.3.40:443

47.39.177.171:2222

47.136.224.60:443

72.29.181.77:2078

94.53.92.42:443

108.227.161.27:995

203.33.139.134:443

72.204.242.138:443

47.180.66.10:443

Targets

    • Target

      85a340ddeca55dbac5256a38f5548b973bf7ffba22504caa6953025803dd3192

    • Size

      1.9MB

    • MD5

      5c47a7cdddd096dbf514b1f805b84f01

    • SHA1

      1ad73a441cb0420a4ff5c8262aed3f212c4f1a8e

    • SHA256

      85a340ddeca55dbac5256a38f5548b973bf7ffba22504caa6953025803dd3192

    • SHA512

      ff7f238b7e64c5d0cb9e53c3cbbd8386e21164e2914df4c27a7b79415572618aa26e4c8ef4e1589cbe54a33a88ebaf4f36eccdfd67ad735f588baccd1d9daddc

    Score
    10/10
    qakbotspx1091588257690bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks