Overview

overview

10

Static

static

94128f783e...0e.dll

windows7_x64

10

94128f783e...0e.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    94128f783ebffa5f5203389d3dc26a0e

  • Size

    890KB

  • Sample

    211021-pew26sbbcm

  • MD5

    94128f783ebffa5f5203389d3dc26a0e

  • SHA1

    577840a380a9b4f7aeddd00fa21b15a4926755be

  • SHA256

    1a8c6286a51023a2c737ea6e18eaeb044d726c4d9f1ed64dd70d9b80d8998cfe

  • SHA512

    94afeb12874513354fbf0d23cd7589b962e88efc45a669f01f3f04bde31562b304cd80cdf5d47e75925d4d37292bbe563c0d2f2999e8758520d1858dc4e1765b

Score
10/10
qakbotbiden541634810637bankerevasionstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

biden54

Campaign

1634810637

C2

136.143.11.232:443

63.143.92.99:995

182.176.180.73:443

136.232.34.70:443

123.252.190.14:443

216.201.162.158:443

37.208.181.198:61200

140.82.49.12:443

197.89.144.102:443

89.137.52.44:443

109.12.111.14:443

78.191.24.189:995

105.198.236.99:995

196.207.140.40:995

41.235.69.115:443

2.222.167.138:443

117.198.156.56:443

24.231.209.2:6881

27.223.92.142:995

96.246.158.154:995
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      94128f783ebffa5f5203389d3dc26a0e

    • Size

      890KB

    • MD5

      94128f783ebffa5f5203389d3dc26a0e

    • SHA1

      577840a380a9b4f7aeddd00fa21b15a4926755be

    • SHA256

      1a8c6286a51023a2c737ea6e18eaeb044d726c4d9f1ed64dd70d9b80d8998cfe

    • SHA512

      94afeb12874513354fbf0d23cd7589b962e88efc45a669f01f3f04bde31562b304cd80cdf5d47e75925d4d37292bbe563c0d2f2999e8758520d1858dc4e1765b

    Score
    10/10
    qakbotbiden541634810637bankerevasionstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Disabling Security Tools

1
T1089

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks