Overview

overview

10

Static

static

44355.6823...^=.dll

windows7_x64

10

44355.6823...^=.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44355.682341088.dat =^_^=

  • Size

    1.2MB

  • Sample

    210608-8df4h5j7wa

  • MD5

    ba524b1747c90128255929a875dee948

  • SHA1

    a7f8ccb5cfcf5159f5041c13f82262c7f0c99026

  • SHA256

    1f05038802b9cf209c4f5421f9094d4ba7cb03b180548c39005b82de370a234f

  • SHA512

    6f906a530453ba35891dd58d085c7235b89496725219c381e7a8c1dae3fc6019d160bd6f828419eeb7459c30d1c37949bc17786290baa0c4aa696a60f03adc89

Score
10/10
qakbotclinton321623136486bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

clinton32

Campaign

1623136486

C2

97.69.160.4:2222

75.67.192.125:443

86.220.62.251:2222

24.179.77.236:443

197.45.110.165:995

27.223.92.142:995

24.152.219.253:995

47.22.148.6:443

92.59.35.196:2222

136.232.34.70:443

188.26.91.212:443

149.28.101.90:2222

149.28.101.90:8443

207.246.77.75:995

45.77.115.208:2222

45.77.115.208:443

149.28.98.196:443

144.202.38.185:995

45.77.117.108:995

207.246.77.75:8443

Targets

    • Target

      44355.682341088.dat =^_^=

    • Size

      1.2MB

    • MD5

      ba524b1747c90128255929a875dee948

    • SHA1

      a7f8ccb5cfcf5159f5041c13f82262c7f0c99026

    • SHA256

      1f05038802b9cf209c4f5421f9094d4ba7cb03b180548c39005b82de370a234f

    • SHA512

      6f906a530453ba35891dd58d085c7235b89496725219c381e7a8c1dae3fc6019d160bd6f828419eeb7459c30d1c37949bc17786290baa0c4aa696a60f03adc89

    Score
    10/10
    qakbotclinton321623136486bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks