Overview

overview

10

Static

static

84cf15353b...54.dll

windows7_x64

10

84cf15353b...54.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84cf15353b14f0828b1ba5be558a03902bcc31265710d23f709c989b694dd954

  • Size

    330KB

  • Sample

    210608-vjnfx97cl2

  • MD5

    9e328e23d88787ed1c22af24f87a09da

  • SHA1

    932ea8eeaf808403a866de4e0e716d0324ee104b

  • SHA256

    84cf15353b14f0828b1ba5be558a03902bcc31265710d23f709c989b694dd954

  • SHA512

    00b801854312f98f711ef2b536e5ea8225251cc2945034b15fdd6735773129f48086ebed8720e7ea60819bc687664d910066a4edd74f8059172f2a6a24f106e3

Score
10/10
qakbottr1621353300bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

tr

Campaign

1621353300

C2

172.78.43.46:443

50.244.112.106:443

24.179.77.148:443

86.220.62.251:2222

24.139.72.117:443

24.55.112.61:443

45.63.107.192:443

47.22.148.6:443

197.45.110.165:995

98.252.118.134:443

24.122.166.173:443

149.28.99.97:995

45.63.107.192:995

109.12.111.14:443

71.187.170.235:443

144.139.47.206:443

86.157.25.253:443

81.97.154.100:443

81.214.126.173:2222

75.67.192.125:443

Targets

    • Target

      84cf15353b14f0828b1ba5be558a03902bcc31265710d23f709c989b694dd954

    • Size

      330KB

    • MD5

      9e328e23d88787ed1c22af24f87a09da

    • SHA1

      932ea8eeaf808403a866de4e0e716d0324ee104b

    • SHA256

      84cf15353b14f0828b1ba5be558a03902bcc31265710d23f709c989b694dd954

    • SHA512

      00b801854312f98f711ef2b536e5ea8225251cc2945034b15fdd6735773129f48086ebed8720e7ea60819bc687664d910066a4edd74f8059172f2a6a24f106e3

    Score
    10/10
    qakbottr1621353300bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks