Overview

overview

10

Static

static

6b4d3e2de5...7c.dll

windows7_x64

10

6b4d3e2de5...7c.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6b4d3e2de5426c8c0bfeeeb3d7da6aa7e19b40e7ab778a9cb8e5c549ec3e8a7c

  • Size

    1.7MB

  • Sample

    220128-vhzkcshbf5

  • MD5

    79860c7847fc6f78f7772592d4b6c6a8

  • SHA1

    d31fe05619d71d0c3401bf1a204794892718dbe2

  • SHA256

    6b4d3e2de5426c8c0bfeeeb3d7da6aa7e19b40e7ab778a9cb8e5c549ec3e8a7c

  • SHA512

    7b811dfb650d92372f201eead65a8a6ede3176681160e43ecf0cff8229c78a8b051d44560082ed1faf21f905cbf9c5fd4c3d179e51c09a11e4d928bafa94fe37

Score
10/10
qakbotobama1531643117667bankerevasionstealertrojan

Malware Config

Extracted

Family

qakbot

Version

403.10

Botnet

obama153

Campaign

1643117667

C2

217.128.93.27:2222

94.200.181.154:995

24.95.61.62:443

39.44.254.218:995

69.14.172.24:443

31.215.68.214:443

173.25.166.81:443

70.163.1.219:443

24.178.196.158:2222

89.101.97.139:443

108.4.67.252:443

217.128.171.34:2222

149.135.101.20:443

38.70.253.226:2222

24.222.20.254:443

74.15.2.252:2222

185.152.45.170:995

209.210.95.228:32100

71.74.12.34:443

180.233.150.134:995
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      6b4d3e2de5426c8c0bfeeeb3d7da6aa7e19b40e7ab778a9cb8e5c549ec3e8a7c

    • Size

      1.7MB

    • MD5

      79860c7847fc6f78f7772592d4b6c6a8

    • SHA1

      d31fe05619d71d0c3401bf1a204794892718dbe2

    • SHA256

      6b4d3e2de5426c8c0bfeeeb3d7da6aa7e19b40e7ab778a9cb8e5c549ec3e8a7c

    • SHA512

      7b811dfb650d92372f201eead65a8a6ede3176681160e43ecf0cff8229c78a8b051d44560082ed1faf21f905cbf9c5fd4c3d179e51c09a11e4d928bafa94fe37

    Score
    10/10
    qakbotobama1531643117667bankerevasionstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Disabling Security Tools

1
T1089

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks