Overview

overview

10

Static

static

035c6ec933...d0.dll

windows7_x64

10

035c6ec933...d0.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    035c6ec93398677e2ac848df8526986478850f5cb8cd24e310128642ad367fd0

  • Size

    337KB

  • Sample

    210511-jxtzrf8pw6

  • MD5

    9bd6aa8cec88f574c81bb81011f8f8e5

  • SHA1

    b10cf1644f8e1b3ecc1950a8c710aeef034efacc

  • SHA256

    035c6ec93398677e2ac848df8526986478850f5cb8cd24e310128642ad367fd0

  • SHA512

    ef08d2d4adab78247d5d3745c6d4bcb112864a7b695e8f5d7137c233ffdaeb3c346b6907707cb07d0df7b5d81bf89bd0774ec2c1d41458680ad65119e3d2f707

Score
10/10
qakbotobama041613469138bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

401.138

Botnet

obama04

Campaign

1613469138

C2

50.29.166.232:995

89.137.211.239:995

172.78.30.215:443

193.248.221.184:2222

80.227.5.69:443

216.201.162.158:443

75.67.192.125:443

105.96.8.96:443

77.211.30.202:995

136.232.34.70:443

87.202.87.210:2222

86.245.46.27:2222

90.101.117.122:2222

81.97.154.100:443

47.196.192.184:443

197.161.154.132:443

78.185.59.190:443

202.188.138.162:443

77.27.204.204:995

203.194.110.74:443

Targets

    • Target

      035c6ec93398677e2ac848df8526986478850f5cb8cd24e310128642ad367fd0

    • Size

      337KB

    • MD5

      9bd6aa8cec88f574c81bb81011f8f8e5

    • SHA1

      b10cf1644f8e1b3ecc1950a8c710aeef034efacc

    • SHA256

      035c6ec93398677e2ac848df8526986478850f5cb8cd24e310128642ad367fd0

    • SHA512

      ef08d2d4adab78247d5d3745c6d4bcb112864a7b695e8f5d7137c233ffdaeb3c346b6907707cb07d0df7b5d81bf89bd0774ec2c1d41458680ad65119e3d2f707

    Score
    10/10
    qakbotobama041613469138bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks