Overview

overview

10

Static

static

9

c773993caa...99.exe

windows7_x64

10

c773993caa...99.exe

windows10-2004_x64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c773993caab5bfa7f121ca1e79713083d5a2d386aebb803f52971e0cc1320599

  • Size

    1.9MB

  • Sample

    220205-l913tsaecn

  • MD5

    f04effdc5bee0d724fb05018f49fc55d

  • SHA1

    e5f05ffc4253b6c4e0e33a01672d55d195d49776

  • SHA256

    c773993caab5bfa7f121ca1e79713083d5a2d386aebb803f52971e0cc1320599

  • SHA512

    0de6e13514c1a40f53d154cb617ceeab9712cb80533af18c06bd470b3a5c1d00e0cb120b45e84ccc8bc0d1881f336fea143f2e438199e2d3e41bb1f9b3df7830

Score
10/10
qakbotspx1091588257690bankercryptonepackerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

324.136

Botnet

spx109

Campaign

1588257690

C2

68.204.164.222:443

47.185.134.79:443

31.5.21.66:443

24.27.82.216:2222

178.193.33.121:2222

96.250.113.218:443

148.75.231.53:443

50.89.14.94:443

50.108.212.180:443

184.57.17.74:443

58.108.188.231:443

47.41.3.40:443

47.39.177.171:2222

47.136.224.60:443

72.29.181.77:2078

94.53.92.42:443

108.227.161.27:995

203.33.139.134:443

72.204.242.138:443

47.180.66.10:443

Targets

    • Target

      c773993caab5bfa7f121ca1e79713083d5a2d386aebb803f52971e0cc1320599

    • Size

      1.9MB

    • MD5

      f04effdc5bee0d724fb05018f49fc55d

    • SHA1

      e5f05ffc4253b6c4e0e33a01672d55d195d49776

    • SHA256

      c773993caab5bfa7f121ca1e79713083d5a2d386aebb803f52971e0cc1320599

    • SHA512

      0de6e13514c1a40f53d154cb617ceeab9712cb80533af18c06bd470b3a5c1d00e0cb120b45e84ccc8bc0d1881f336fea143f2e438199e2d3e41bb1f9b3df7830

    Score
    10/10
    qakbotspx1091588257690bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks