Overview

overview

10

Static

static

9

7a67299805...4f.exe

windows7_x64

10

7a67299805...4f.exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7a67299805556f9cd973fc12c8a6baef293e8413ed035165a04394ec67c2cf4f

  • Size

    1.8MB

  • Sample

    220201-f9g23ahden

  • MD5

    ab88f9b8a9a181593ffd40ba36a6933f

  • SHA1

    1b73f2dcffb44f6b049b2ac8668db15f1ef19284

  • SHA256

    7a67299805556f9cd973fc12c8a6baef293e8413ed035165a04394ec67c2cf4f

  • SHA512

    a4474b0485758fcbaa5c0fa7db909624252c7119c77953a1a95bf3f94897b42ea22d8d2d38955cc23f9ee39a73e528b401319957302eb1d447c0748ee385a2ea

Score
10/10
qakbotspx841585124895bankercryptonepackerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

324.70

Botnet

spx84

Campaign

1585124895

C2

99.228.5.106:995

71.241.247.189:443

173.245.152.231:443

79.113.219.121:443

24.44.180.236:2222

80.11.10.151:990

78.96.148.177:443

75.137.60.81:443

68.46.142.48:995

24.32.119.146:443

35.143.248.234:443

35.142.24.147:2222

71.68.197.202:995

96.57.237.162:443

74.138.18.247:443

174.110.39.220:443

62.231.93.154:443

70.164.39.91:443

74.194.4.181:443

67.190.189.217:443

Targets

    • Target

      7a67299805556f9cd973fc12c8a6baef293e8413ed035165a04394ec67c2cf4f

    • Size

      1.8MB

    • MD5

      ab88f9b8a9a181593ffd40ba36a6933f

    • SHA1

      1b73f2dcffb44f6b049b2ac8668db15f1ef19284

    • SHA256

      7a67299805556f9cd973fc12c8a6baef293e8413ed035165a04394ec67c2cf4f

    • SHA512

      a4474b0485758fcbaa5c0fa7db909624252c7119c77953a1a95bf3f94897b42ea22d8d2d38955cc23f9ee39a73e528b401319957302eb1d447c0748ee385a2ea

    Score
    10/10
    qakbotspx841585124895bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks