Overview

overview

10

Static

static

8f7b64bb39...1d.dll

windows7_x64

10

8f7b64bb39...1d.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8f7b64bb398fc163d125adf98417739b440f9be36849566489e39beefd5e9e1d

  • Size

    675KB

  • Sample

    210517-yzkr7jqp6e

  • MD5

    15a56642b679025bb5d3154dd3c41105

  • SHA1

    74f1796c02822e70b79669f482361b90793e495d

  • SHA256

    8f7b64bb398fc163d125adf98417739b440f9be36849566489e39beefd5e9e1d

  • SHA512

    a510c149948a701b3237cfa9415f9354f4dadaeb6d017299d572963f699860ea76b9885048272e5a53703b9e1f2577ef066f22877ddf6928fbace9d99d0027b2

Score
10/10
qakbotclinton161620911967bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

clinton16

Campaign

1620911967

C2

71.41.184.10:3389

216.201.162.158:443

95.77.223.148:443

71.74.12.34:443

86.220.62.251:2222

24.229.150.54:995

24.55.112.61:443

76.25.142.196:443

136.232.34.70:443

149.28.99.97:443

45.63.107.192:2222

45.63.107.192:443

149.28.99.97:2222

149.28.99.97:995

45.63.107.192:995

86.248.16.253:2222

86.160.137.225:443

75.67.192.125:443

140.82.49.12:443

47.22.148.6:443

Targets

    • Target

      8f7b64bb398fc163d125adf98417739b440f9be36849566489e39beefd5e9e1d

    • Size

      675KB

    • MD5

      15a56642b679025bb5d3154dd3c41105

    • SHA1

      74f1796c02822e70b79669f482361b90793e495d

    • SHA256

      8f7b64bb398fc163d125adf98417739b440f9be36849566489e39beefd5e9e1d

    • SHA512

      a510c149948a701b3237cfa9415f9354f4dadaeb6d017299d572963f699860ea76b9885048272e5a53703b9e1f2577ef066f22877ddf6928fbace9d99d0027b2

    Score
    10/10
    qakbotclinton161620911967bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks