Overview

overview

10

Static

static

3b5cf14550...19.dll

windows7_x64

10

3b5cf14550...19.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b5cf14550a79b9d51a016df893c8dbd2dcd03189d84a239e4d1bbd0a6f15b19

  • Size

    1.7MB

  • Sample

    220125-qca8csgcck

  • MD5

    310afa8a793843687b964a53226ee574

  • SHA1

    dea0d12de0e53c00b3b4397fe800c85c1a13dc08

  • SHA256

    3b5cf14550a79b9d51a016df893c8dbd2dcd03189d84a239e4d1bbd0a6f15b19

  • SHA512

    08b0995d79e0be8870a2593767a3e6471f40870a3406fd3f51ba16ea013e21e783d28a041fae8ce834b4b63d683d8cd8dfe0c47ddd1c89bd51780e6adee1690e

Score
10/10
qakbottr1643025307bankerevasionstealertrojan

Malware Config

Extracted

Family

qakbot

Version

403.10

Botnet

tr

Campaign

1643025307

C2

103.143.8.71:6881

37.210.172.200:2222

136.143.11.232:443

190.73.3.148:2222

78.101.147.76:61202

82.152.39.39:443

65.100.174.110:995

65.100.174.110:443

111.125.245.116:995

117.248.109.38:21

31.215.99.178:443

103.142.10.177:443

39.49.110.129:995

86.97.246.244:1194

68.204.7.158:443

217.128.93.27:2222

144.86.28.125:443

94.59.253.222:2222

120.150.218.241:995

185.249.85.209:443
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      3b5cf14550a79b9d51a016df893c8dbd2dcd03189d84a239e4d1bbd0a6f15b19

    • Size

      1.7MB

    • MD5

      310afa8a793843687b964a53226ee574

    • SHA1

      dea0d12de0e53c00b3b4397fe800c85c1a13dc08

    • SHA256

      3b5cf14550a79b9d51a016df893c8dbd2dcd03189d84a239e4d1bbd0a6f15b19

    • SHA512

      08b0995d79e0be8870a2593767a3e6471f40870a3406fd3f51ba16ea013e21e783d28a041fae8ce834b4b63d683d8cd8dfe0c47ddd1c89bd51780e6adee1690e

    Score
    10/10
    qakbottr1643025307bankerevasionstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Disabling Security Tools

1
T1089

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks