Overview

overview

10

Static

static

sun.dll

windows7_x64

sun.dll

windows10_x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    sun.dll

  • Size

    333KB

  • Sample

    210616-t2bygsadcn

  • MD5

    c45150cb30adf11ab6c286328ad81957

  • SHA1

    cdec0ed9e7bae8836e6dfef4799f5a998f7c3f24

  • SHA256

    5d1e9a609c19fa4f6d20e709b311eee3ea50605fb7d27e798eae79a971c662b4

  • SHA512

    87648f1a29fb7848aba55d7ea37cfe751b10cc0aa876633173788b547b4be361375d54a920c637bf68e5af53734c0b04c59c785a24d05e5844c924d76b0f17c0

Score
10/10
qakbottr1623837834bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.115

Botnet

tr

Campaign

1623837834

C2

144.139.47.206:443

105.198.236.101:443

136.232.34.70:443

90.65.234.26:2222

71.41.184.10:3389

98.192.185.86:443

184.185.103.157:443

24.179.77.236:443

81.97.154.100:443

186.144.33.73:443

96.253.46.210:443

213.122.113.120:443

47.22.148.6:443

149.28.99.97:995

45.63.107.192:2222

45.32.211.207:443

45.32.211.207:8443

149.28.98.196:995

45.63.107.192:995

45.77.115.208:443

Targets

    • Target

      sun.dll

    • Size

      333KB

    • MD5

      c45150cb30adf11ab6c286328ad81957

    • SHA1

      cdec0ed9e7bae8836e6dfef4799f5a998f7c3f24

    • SHA256

      5d1e9a609c19fa4f6d20e709b311eee3ea50605fb7d27e798eae79a971c662b4

    • SHA512

      87648f1a29fb7848aba55d7ea37cfe751b10cc0aa876633173788b547b4be361375d54a920c637bf68e5af53734c0b04c59c785a24d05e5844c924d76b0f17c0

    Score
    10/10
    qakbottr1623837834bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks