Overview

overview

10

Static

static

44330.dll

windows7_x64

10

44330.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44330.dll

  • Size

    675KB

  • Sample

    210514-gjsgxspew2

  • MD5

    89925017eb3c3e2ebf5ce8df6978847d

  • SHA1

    e7feec83906d838b3d6f9132396884ef889ca0bf

  • SHA256

    d5d3a7d3802ea70a00c09a43a933beded4becac63eae4f73f429588b5070b0cc

  • SHA512

    e7575745f58230e6daefcb6c912abfd1de6270bbbcc1adc42d7983bff4999236e2c8d0fb073edc9b23c8dbe3619de1890ff8c38a692bc1c95f6922573f211cbb

Score
10/10
qakbotclinton161620911967bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

clinton16

Campaign

1620911967

C2

71.41.184.10:3389

216.201.162.158:443

95.77.223.148:443

71.74.12.34:443

86.220.62.251:2222

24.229.150.54:995

24.55.112.61:443

76.25.142.196:443

136.232.34.70:443

149.28.99.97:443

45.63.107.192:2222

45.63.107.192:443

149.28.99.97:2222

149.28.99.97:995

45.63.107.192:995

86.248.16.253:2222

86.160.137.225:443

75.67.192.125:443

140.82.49.12:443

47.22.148.6:443

Targets

    • Target

      44330.dll

    • Size

      675KB

    • MD5

      89925017eb3c3e2ebf5ce8df6978847d

    • SHA1

      e7feec83906d838b3d6f9132396884ef889ca0bf

    • SHA256

      d5d3a7d3802ea70a00c09a43a933beded4becac63eae4f73f429588b5070b0cc

    • SHA512

      e7575745f58230e6daefcb6c912abfd1de6270bbbcc1adc42d7983bff4999236e2c8d0fb073edc9b23c8dbe3619de1890ff8c38a692bc1c95f6922573f211cbb

    Score
    10/10
    qakbotclinton161620911967bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks