qakbot | b4abdad039b0eea9b5dae6f28c9945cb18d3603282866fb15c37697d14fff529

General

Target

b4abdad039b0eea9b5dae6f28c9945cb18d3603282866fb15c37697d14fff529
Size

1.6MB
Sample

211022-s7k26abgg4
MD5

4f7a4448b2e7d0618b86ee1eb62469e9
SHA1

c5854232e23a72caa5a719dfb1badb58a98cac3a
SHA256

b4abdad039b0eea9b5dae6f28c9945cb18d3603282866fb15c37697d14fff529
SHA512

40ca8de592e8cb4ff50e3fd5a82dc1a6695cc137efee27883e20f560dd47ed0b59c2fdb7a5c6fe71f94088abce3c69760b17bba9f480aa3b5fac44bdba6d49fc

Score

10^/10

qakbot tr 1634541613 banker stealer trojan

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

tr

Campaign

1634541613

C2

120.150.218.241:995

24.119.214.7:443

103.143.8.71:443

81.241.252.59:2078

81.250.153.227:2222

174.54.193.186:443

73.52.50.32:443

39.49.122.240:995

86.220.112.26:2222

103.82.211.39:465

78.191.38.33:995

216.201.162.158:443

181.118.183.94:443

66.177.215.152:0

208.78.220.143:443

94.200.181.154:443

136.232.34.70:443

136.143.11.232:443

81.213.59.22:443

103.82.211.39:990

Attributes

salt
jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

- Target
  
  b4abdad039b0eea9b5dae6f28c9945cb18d3603282866fb15c37697d14fff529
- Size
  
  1.6MB
- MD5
  
  4f7a4448b2e7d0618b86ee1eb62469e9
- SHA1
  
  c5854232e23a72caa5a719dfb1badb58a98cac3a
- SHA256
  
  b4abdad039b0eea9b5dae6f28c9945cb18d3603282866fb15c37697d14fff529
- SHA512
  
  40ca8de592e8cb4ff50e3fd5a82dc1a6695cc137efee27883e20f560dd47ed0b59c2fdb7a5c6fe71f94088abce3c69760b17bba9f480aa3b5fac44bdba6d49fc
Score

10^/10

qakbot tr 1634541613 banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1

T1053

Persistence

Scheduled Task

1

T1053

Privilege Escalation

Scheduled Task

1

T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Qakbot/Qbot

Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2