Overview

overview

10

Static

static

44371.4623...at.dll

windows7_x64

10

44371.4623...at.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44371.462303588.dat

  • Size

    265KB

  • Sample

    210625-xcellnz3q6

  • MD5

    5071e0b42beb338edd1a0316806f1d93

  • SHA1

    fb4d12892f7a3e73d3b0035898bc011a868babbb

  • SHA256

    09ac7dda82d0849b963886a0dc511635f397580ab794007061dc57a5a46ca213

  • SHA512

    00a9d1ca97b840ff6dbd5d584f953e8ddf81ae3e859d07a99bbe7f3342573b4b8d74e68ea6bdd5b0daabd29dd0ed2b78e1f273184ac69e302d61fa889b2b17f0

Score
10/10
qakbotobama621624268905bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.115

Botnet

obama62

Campaign

1624268905

C2

184.185.103.157:443

24.179.77.236:443

71.41.184.10:3389

95.77.223.148:443

81.97.154.100:443

105.198.236.99:443

86.220.60.247:2222

197.45.110.165:995

149.28.98.196:2222

149.28.98.196:995

149.28.101.90:443

149.28.101.90:8443

149.28.99.97:2222

45.32.211.207:995

45.63.107.192:995

45.63.107.192:443

45.63.107.192:2222

45.32.211.207:2222

207.246.77.75:8443

45.32.211.207:8443

Targets

    • Target

      44371.462303588.dat

    • Size

      265KB

    • MD5

      5071e0b42beb338edd1a0316806f1d93

    • SHA1

      fb4d12892f7a3e73d3b0035898bc011a868babbb

    • SHA256

      09ac7dda82d0849b963886a0dc511635f397580ab794007061dc57a5a46ca213

    • SHA512

      00a9d1ca97b840ff6dbd5d584f953e8ddf81ae3e859d07a99bbe7f3342573b4b8d74e68ea6bdd5b0daabd29dd0ed2b78e1f273184ac69e302d61fa889b2b17f0

    Score
    10/10
    qakbotobama621624268905bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks