Overview

overview

10

Static

static

10

Qbot_12May21.bin.dll

windows7_x64

10

Qbot_12May21.bin.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Qbot_12May21.bin

  • Size

    255KB

  • Sample

    210512-vlznrlsxxs

  • MD5

    6f61bc3681ab29861e42860e7407164a

  • SHA1

    77b70414edca48014a0ac2ec607ab510bd5cb789

  • SHA256

    ae3055c19ad423ef263d41db3a3b5bfbb435dc5027acd20e9f115cd89554f5da

  • SHA512

    4e61077a7a62e61494fad862830ab9e31817b410398f5696128226e4131419a692ae9aff496d0855e8d4daa077b3fde96601b0e50e5b9658672a98283a81b9c2

Score
10/10
qakbottr1619706851bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

tr

Campaign

1619706851

C2

24.117.107.120:443

190.85.91.154:443

72.252.201.69:443

189.210.115.207:443

71.41.184.10:3389

81.97.154.100:443

50.29.166.232:995

140.82.49.12:443

75.137.47.174:443

71.74.12.34:443

73.25.124.140:2222

149.28.99.97:2222

45.77.115.208:2222

45.32.211.207:995

207.246.116.237:443

149.28.99.97:443

207.246.77.75:443

149.28.98.196:995

207.246.116.237:2222

45.77.115.208:8443

Targets

    • Target

      Qbot_12May21.bin

    • Size

      255KB

    • MD5

      6f61bc3681ab29861e42860e7407164a

    • SHA1

      77b70414edca48014a0ac2ec607ab510bd5cb789

    • SHA256

      ae3055c19ad423ef263d41db3a3b5bfbb435dc5027acd20e9f115cd89554f5da

    • SHA512

      4e61077a7a62e61494fad862830ab9e31817b410398f5696128226e4131419a692ae9aff496d0855e8d4daa077b3fde96601b0e50e5b9658672a98283a81b9c2

    Score
    10/10
    qakbottr1619706851bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks