Overview

overview

10

Static

static

44484.6871...at.dll

windows7_x64

10

44484.6871...at.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44484.6871458333.dat

  • Size

    905KB

  • Sample

    211015-q1t1dabab9

  • MD5

    028851f519f904c1f367dcc2f17612b4

  • SHA1

    3b5f3470e00b8064d233a2e2fb8011d3474e7cd9

  • SHA256

    99c7d40784fe46cc9acd304219a554ce378b7832a602866e352d9562f191d703

  • SHA512

    6cb05daf1f132bec4c924104b66578033f4450d5af0e28b049c8f0c3476b5b65548e728d7a3bcb4e780a4c121e48329fefc1f07c5e1bb72218d64e60046e3d49

Score
10/10
qakbotobama1161634289383bankerevasionstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

obama116

Campaign

1634289383

C2

41.228.22.180:443

188.55.249.239:995

120.150.218.241:995

37.117.191.19:2222

68.204.7.158:443

81.241.252.59:2078

196.207.140.40:995

174.54.193.186:443

63.143.92.99:995

197.89.144.200:443

86.220.112.26:2222

73.52.50.32:443

103.82.211.39:465

146.66.238.74:443

167.248.117.81:443

2.222.167.138:443

181.118.183.94:443

103.82.211.39:995

78.179.137.102:995

89.137.52.44:443
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      44484.6871458333.dat

    • Size

      905KB

    • MD5

      028851f519f904c1f367dcc2f17612b4

    • SHA1

      3b5f3470e00b8064d233a2e2fb8011d3474e7cd9

    • SHA256

      99c7d40784fe46cc9acd304219a554ce378b7832a602866e352d9562f191d703

    • SHA512

      6cb05daf1f132bec4c924104b66578033f4450d5af0e28b049c8f0c3476b5b65548e728d7a3bcb4e780a4c121e48329fefc1f07c5e1bb72218d64e60046e3d49

    Score
    10/10
    qakbotobama1161634289383bankerevasionstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Disabling Security Tools

1
T1089

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks