Overview

overview

10

Static

static

test.test.dll

windows7_x64

10

test.test.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    test.test

  • Size

    995KB

  • Sample

    211109-m53xasfae3

  • MD5

    4dd3f1c333b4a92dc9e8a8937aa076ff

  • SHA1

    4c60571118c0cb9636f00f70d537e21620b42f3b

  • SHA256

    7faebfe58b2892d431ba82a76fb8ad5e5ceae7efb84911a662d37f8a76d728ce

  • SHA512

    9fb5af46da6e4206a75c45f275e8b7aa3e6f7f3267e9e19c5ab025d64b83bb1738c85026ee6cfda09dd143ffcd17e9f947672c61312fc9e8583831c7c79ba17b

Score
10/10
qakbottr1635953596bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.388

Botnet

tr

Campaign

1635953596

C2

190.73.3.148:2222

109.177.30.138:995

181.99.138.132:465

109.228.255.59:443

94.200.181.154:443

103.150.40.76:995

216.238.71.31:443

216.238.72.121:443

216.238.72.121:995

216.238.71.31:995

177.172.5.228:995

201.172.31.95:80

67.165.206.193:993

50.194.160.233:32100

92.59.35.196:2222

89.101.97.139:443

176.35.109.202:2222

140.82.49.12:443

109.133.93.127:995

71.13.93.154:2222
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      test.test

    • Size

      995KB

    • MD5

      4dd3f1c333b4a92dc9e8a8937aa076ff

    • SHA1

      4c60571118c0cb9636f00f70d537e21620b42f3b

    • SHA256

      7faebfe58b2892d431ba82a76fb8ad5e5ceae7efb84911a662d37f8a76d728ce

    • SHA512

      9fb5af46da6e4206a75c45f275e8b7aa3e6f7f3267e9e19c5ab025d64b83bb1738c85026ee6cfda09dd143ffcd17e9f947672c61312fc9e8583831c7c79ba17b

    Score
    10/10
    qakbottr1635953596bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks