Overview

overview

10

Static

static

a5c8870f3c...df.dll

windows7_x64

10

a5c8870f3c...df.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a5c8870f3c8c0d933420f04e24b6bbdf.dll

  • Size

    471KB

  • Sample

    210930-sp6k5sabdl

  • MD5

    a5c8870f3c8c0d933420f04e24b6bbdf

  • SHA1

    4478b0c7d641a2c67bbd040ae19a59b7a1d2b485

  • SHA256

    a9457a1ad7aef20eae672a7e3fb51d6904a72df826e810c5aa30dde9e1b68cb0

  • SHA512

    ed6eccf6d9ff904776114e57cf9f11fe1a54facd3189ae51f54731f467fd293efb3d7739dd99a4d21fe2e207b6f14fca1430d66022615eafd3e94fcf967d5516

Score
10/10
qakbottr1632817399bankerevasionstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

tr

Campaign

1632817399

C2

105.198.236.99:443

140.82.49.12:443

37.210.152.224:995

89.101.97.139:443

81.241.252.59:2078

27.223.92.142:995

81.250.153.227:2222

73.151.236.31:443

47.22.148.6:443

122.11.220.212:2222

120.151.47.189:443

199.27.127.129:443

216.201.162.158:443

136.232.34.70:443

76.25.142.196:443

181.118.183.94:443

120.150.218.241:995

185.250.148.74:443

95.77.223.148:443

75.66.88.33:443

Targets

    • Target

      a5c8870f3c8c0d933420f04e24b6bbdf.dll

    • Size

      471KB

    • MD5

      a5c8870f3c8c0d933420f04e24b6bbdf

    • SHA1

      4478b0c7d641a2c67bbd040ae19a59b7a1d2b485

    • SHA256

      a9457a1ad7aef20eae672a7e3fb51d6904a72df826e810c5aa30dde9e1b68cb0

    • SHA512

      ed6eccf6d9ff904776114e57cf9f11fe1a54facd3189ae51f54731f467fd293efb3d7739dd99a4d21fe2e207b6f14fca1430d66022615eafd3e94fcf967d5516

    Score
    10/10
    qakbottr1632817399bankerevasionstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Disabling Security Tools

1
T1089

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks