Overview

overview

10

Static

static

315dfd516b...e2.dll

windows7_x64

10

315dfd516b...e2.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    315dfd516bc9d56b6bd5b444608890e2

  • Size

    1.2MB

  • Sample

    210608-2hrdqvjjfs

  • MD5

    315dfd516bc9d56b6bd5b444608890e2

  • SHA1

    32814ef4ef21b714b0631a0c044a21713e9de969

  • SHA256

    7bb460865f51d0453a56a7a233c4cc33d1fcc1c6baced727bdc5e296823ec798

  • SHA512

    30f3c56d7b4bf4381827f97c599f530e121c6007df03f8775379b0475dddd7b967abaced727cec48c5fdb5d5d23ef34c4bee6dc307f3bd65c9f729f04a22c094

Score
10/10
qakbotobama571623136472bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

obama57

Campaign

1623136472

C2

97.69.160.4:2222

75.67.192.125:443

86.220.62.251:2222

24.179.77.236:443

197.45.110.165:995

27.223.92.142:995

24.152.219.253:995

47.22.148.6:443

92.59.35.196:2222

136.232.34.70:443

188.26.91.212:443

149.28.101.90:2222

149.28.101.90:8443

207.246.77.75:995

45.77.115.208:2222

45.77.115.208:443

149.28.98.196:443

144.202.38.185:995

45.77.117.108:995

207.246.77.75:8443

Targets

    • Target

      315dfd516bc9d56b6bd5b444608890e2

    • Size

      1.2MB

    • MD5

      315dfd516bc9d56b6bd5b444608890e2

    • SHA1

      32814ef4ef21b714b0631a0c044a21713e9de969

    • SHA256

      7bb460865f51d0453a56a7a233c4cc33d1fcc1c6baced727bdc5e296823ec798

    • SHA512

      30f3c56d7b4bf4381827f97c599f530e121c6007df03f8775379b0475dddd7b967abaced727cec48c5fdb5d5d23ef34c4bee6dc307f3bd65c9f729f04a22c094

    Score
    10/10
    qakbotobama571623136472bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks