Overview

overview

10

Static

static

44483.5405...at.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44483.540521412.dat

  • Size

    500KB

  • Sample

    211015-hd8agsafb3

  • MD5

    d1265a257b2f72efaf9d62c0045c9b6e

  • SHA1

    1d02ba044e633e673f08fbf400ad506c3031cff2

  • SHA256

    42737acf7fb7d153217e694c2a1f7bb9c189c30ed96f0f0d465655cea46cde89

  • SHA512

    8f47f8e288b21a05d0edb066036ed4df53940bd5993f3338c4559942a6257b0460848255b72cd0ee9fc0818af484311104431b52978afc2b4be4eaaae98af9a1

Score
10/10
qakbotobama1151634197867bankerevasionstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

obama115

Campaign

1634197867

C2

91.178.126.51:995

220.255.25.28:2222

208.78.220.143:443

77.31.162.93:443

73.230.205.91:443

216.201.162.158:443

94.200.181.154:443

24.231.209.2:2222

89.137.52.44:443

140.82.49.12:443

65.100.174.110:32103

41.86.42.158:995

27.223.92.142:995

200.232.214.222:995

81.250.153.227:2222

217.17.56.163:465

122.60.71.201:995

120.150.218.241:995

41.228.22.180:443

69.30.186.190:443
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      44483.540521412.dat

    • Size

      500KB

    • MD5

      d1265a257b2f72efaf9d62c0045c9b6e

    • SHA1

      1d02ba044e633e673f08fbf400ad506c3031cff2

    • SHA256

      42737acf7fb7d153217e694c2a1f7bb9c189c30ed96f0f0d465655cea46cde89

    • SHA512

      8f47f8e288b21a05d0edb066036ed4df53940bd5993f3338c4559942a6257b0460848255b72cd0ee9fc0818af484311104431b52978afc2b4be4eaaae98af9a1

    Score
    10/10
    qakbotobama1151634197867bankerevasionstealertrojan
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Disabling Security Tools

1
T1089

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks