Overview

overview

10

Static

static

SecuriteIn...36.dll

windows7_x64

10

SecuriteIn...36.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SecuriteInfo.com.BackDoor.Qbot.623.4600.25636

  • Size

    966KB

  • Sample

    211015-xs71labcd8

  • MD5

    5c76498485ac6534b1b1aa0d6d543762

  • SHA1

    cf7f1b0007a4007510e48fbc7e61772c25314352

  • SHA256

    d3fa92f89ffbc4403c0f8b95034a61d63cfb47fd11cb7d90b5a8d724250234a3

  • SHA512

    f27857746c8ce5284faf40089a460967688c7e0d24ecbc733bf4f0afe41a4e4186eef61831f7b75dcc61b43a1048b5fcd151d8c1e34aac7f60c51c7e2bce129c

Score
10/10
qakbottr1632152047bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.318

Botnet

tr

Campaign

1632152047

C2

45.46.53.140:2222

144.139.47.206:443

189.210.115.207:443

120.150.218.241:995

47.22.148.6:443

140.82.49.12:443

24.139.72.117:443

24.229.150.54:995

24.55.112.61:443

136.232.34.70:443

95.77.223.148:443

173.21.10.71:2222

76.25.142.196:443

96.37.113.36:993

71.74.12.34:443

73.151.236.31:443

67.165.206.193:993

109.12.111.14:443

68.204.7.158:443

105.198.236.99:443
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      SecuriteInfo.com.BackDoor.Qbot.623.4600.25636

    • Size

      966KB

    • MD5

      5c76498485ac6534b1b1aa0d6d543762

    • SHA1

      cf7f1b0007a4007510e48fbc7e61772c25314352

    • SHA256

      d3fa92f89ffbc4403c0f8b95034a61d63cfb47fd11cb7d90b5a8d724250234a3

    • SHA512

      f27857746c8ce5284faf40089a460967688c7e0d24ecbc733bf4f0afe41a4e4186eef61831f7b75dcc61b43a1048b5fcd151d8c1e34aac7f60c51c7e2bce129c

    Score
    10/10
    qakbottr1632152047bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks