Overview

overview

10

Static

static

44355.4553...^=.dll

windows7_x64

10

44355.4553...^=.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44355.4553899306.dat =^_^=

  • Size

    1.2MB

  • Sample

    210608-2dv1bfpz5a

  • MD5

    9d5de0c3248375f908d43acb2bb8f59b

  • SHA1

    f3dcd692195211bcfa5966012eb4226d6da20ede

  • SHA256

    5714e50c57e6c47562832908fa89ffa075957b5dfd23f6832a368b33e7f45867

  • SHA512

    8ce15d3c8c31c1fba412c2960f5d3c4e94e8430afc68e7e48dd0fb5b285f74e0fd872668471d4f2b1d22b11ae7024e5a223a39200d32d4edfb3763ebdcb95bb0

Score
10/10
qakbotobama571623136472bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

obama57

Campaign

1623136472

C2

97.69.160.4:2222

75.67.192.125:443

86.220.62.251:2222

24.179.77.236:443

197.45.110.165:995

27.223.92.142:995

24.152.219.253:995

47.22.148.6:443

92.59.35.196:2222

136.232.34.70:443

188.26.91.212:443

149.28.101.90:2222

149.28.101.90:8443

207.246.77.75:995

45.77.115.208:2222

45.77.115.208:443

149.28.98.196:443

144.202.38.185:995

45.77.117.108:995

207.246.77.75:8443

Targets

    • Target

      44355.4553899306.dat =^_^=

    • Size

      1.2MB

    • MD5

      9d5de0c3248375f908d43acb2bb8f59b

    • SHA1

      f3dcd692195211bcfa5966012eb4226d6da20ede

    • SHA256

      5714e50c57e6c47562832908fa89ffa075957b5dfd23f6832a368b33e7f45867

    • SHA512

      8ce15d3c8c31c1fba412c2960f5d3c4e94e8430afc68e7e48dd0fb5b285f74e0fd872668471d4f2b1d22b11ae7024e5a223a39200d32d4edfb3763ebdcb95bb0

    Score
    10/10
    qakbotobama571623136472bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks