qakbot | d302a473d8f19884d38147d13ce87f54b897dad51fdc6490467bca62cc7ae937

Resubmissions

13-01-2022 09:19

220113-laarlahafl 10

11-01-2022 07:00

220111-hszlwsfae5 10

04-01-2022 11:08

220104-m8skqsagcq 10

Sharing

Copy URL

Twitter E-mail

General

Target

d302a473d8f19884d38147d13ce87f54b897dad51fdc6490467bca62cc7ae937.exe
Size

945KB
Sample

220104-m8skqsagcq
MD5

bb17bf13123596ba3065efc74d625a3c
SHA1

b589b0dee84e30e205f242a8d429b1e231b5ec5b
SHA256

d302a473d8f19884d38147d13ce87f54b897dad51fdc6490467bca62cc7ae937
SHA512

40d6bb5bb741b43a03969c40acafbc621281ad9f4fa23d3a90f07e30b01eda95227af6b96a20d48712f08b2252069e711842d71d3f1e95374db44fb7845ab427

Score

10^/10

Malware Config

Extracted

Family

qakbot

Version

403.10

Botnet

cullinan

Campaign

1639333530

65.100.174.110:443

173.21.10.71:2222

140.82.49.12:443

190.73.3.148:2222

76.25.142.196:443

71.74.12.34:443

31.215.98.160:443

93.48.80.198:995

45.9.20.200:2211

41.228.22.180:443

109.12.111.14:443

63.143.92.99:995

120.150.218.241:995

94.60.254.81:443

86.148.6.51:443

218.101.110.3:995

216.238.71.31:443

207.246.112.221:443

216.238.72.121:443

216.238.71.31:995

Attributes

salt
jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

- Target
  
  d302a473d8f19884d38147d13ce87f54b897dad51fdc6490467bca62cc7ae937.exe
- Size
  
  945KB
- MD5
  
  bb17bf13123596ba3065efc74d625a3c
- SHA1
  
  b589b0dee84e30e205f242a8d429b1e231b5ec5b
- SHA256
  
  d302a473d8f19884d38147d13ce87f54b897dad51fdc6490467bca62cc7ae937
- SHA512
  
  40d6bb5bb741b43a03969c40acafbc621281ad9f4fa23d3a90f07e30b01eda95227af6b96a20d48712f08b2252069e711842d71d3f1e95374db44fb7845ab427
Score

10^/10

qakbot cullinan 1639333530 banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
behavioral1