Overview

overview

10

Static

static

44490.6705...at.dll

windows7_x64

10

44490.6705...at.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44490.6705313657.dat

  • Size

    534KB

  • Sample

    211021-vftw4abdeq

  • MD5

    f0be8564345b34916f8b78001baf717d

  • SHA1

    b0dd2e978c6504df6b08b6e8566af8cde0ae8f4f

  • SHA256

    834de7884888e755f1f99061d4c019cfad3bfab15eda47b5d5e7b3f0755dee59

  • SHA512

    2d492277f7efe3277acfa7d325a2952896db812a6d39c03f5cf483a5901782a489c6aae347b516aa552accec1be32af119d473e60cc95ecc05d36e18563af3b1

Score
10/10
qakbotbiden541634802135bankerevasionstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

biden54

Campaign

1634802135

C2

81.250.153.227:2222

120.150.218.241:995

76.25.142.196:443

63.143.92.99:995

89.101.97.139:443

136.143.11.232:443

81.213.59.22:443

136.232.34.70:443

140.82.49.12:443

37.208.181.198:61200

78.191.24.189:995

216.201.162.158:443

197.89.144.102:443

89.137.52.44:443

182.176.180.73:443

173.21.10.71:2222

117.198.156.56:443

196.207.140.40:995

103.142.10.177:443

24.231.209.2:6881
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      44490.6705313657.dat

    • Size

      534KB

    • MD5

      f0be8564345b34916f8b78001baf717d

    • SHA1

      b0dd2e978c6504df6b08b6e8566af8cde0ae8f4f

    • SHA256

      834de7884888e755f1f99061d4c019cfad3bfab15eda47b5d5e7b3f0755dee59

    • SHA512

      2d492277f7efe3277acfa7d325a2952896db812a6d39c03f5cf483a5901782a489c6aae347b516aa552accec1be32af119d473e60cc95ecc05d36e18563af3b1

    Score
    10/10
    qakbotbiden541634802135bankerevasionstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Disabling Security Tools

1
T1089

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks