qakbot | 9ae13c19261bfaabaaf173c24d895e19fa751373749f17058e288dc5c6a481a0

Sharing

Copy URL Twitter E-mail

General

Target
9ae13c19261bfaabaaf173c24d895e19fa751373749f17058e288dc5c6a481a0
Size 415KB
Sample220228-t384vsefe7
SHA256 9ae13c19261bfaabaaf173c24d895e19fa751373749f17058e288dc5c6a481a0
MD5 b7f49ef3c46285f9f4bc49a3bb6389a1
SHA1 0a8ae017dbe1190b55ca69e1edfccb365aaf7981
SHA512 6c897a5476c22366c91e9cae97a3df9dd4d87f4283f3640f0d6ac2b3e08658e285b2d759cd418218fed9d33c527656f669a6491a300bb87552d85b9ec4704edb
MD5 SHA1 SHA512

Score

10^/10

Malware Config

Extracted

Family

qakbot

Version

403.549

Botnet

obama160

Campaign

1646042914

193.253.44.249:2222
38.70.253.226:2222
176.110.96.225:443
41.228.22.180:443
5.88.12.21:443
41.84.247.27:995
144.202.2.175:995
114.79.148.170:443
105.184.116.32:995
78.191.34.56:995
92.177.45.46:2078
82.41.63.217:443
67.209.195.198:443
217.128.122.65:2222
184.100.174.73:443
120.150.218.241:995
32.221.231.1:443
129.208.10.192:995
89.211.185.240:2222
180.233.150.134:995
190.189.33.6:32101
141.237.140.181:995
76.70.9.169:2222
220.129.52.36:443
84.241.8.23:32103
39.49.110.154:995
78.100.194.138:6883
74.15.2.252:2222
136.143.11.232:443
139.228.65.100:2222
209.210.95.228:32100
75.156.151.34:443
96.21.251.127:2222
149.135.101.20:443
31.215.84.57:2222
2.50.41.69:61200
103.139.242.30:990
197.89.109.221:443
190.73.3.148:2222
63.143.92.99:995
185.249.85.209:443
89.101.97.139:443
82.152.39.39:443
144.202.2.175:443
176.67.56.94:443
66.230.104.103:443
47.180.172.159:443
140.82.49.12:443
75.99.168.194:443
47.180.172.159:50010
117.248.109.38:21
2.50.27.78:443
24.178.196.158:2222
39.52.38.109:995
128.106.122.206:443
180.183.100.147:2222
86.98.156.238:993
39.44.124.140:995
197.164.171.102:995
167.86.202.26:443
197.167.46.225:995
47.23.89.60:993
173.174.216.62:443
121.7.223.188:2222
124.41.193.166:443
197.167.46.225:993
93.48.80.198:995
41.43.13.54:995
160.179.145.47:443
182.191.92.203:995
39.41.139.127:995
75.99.168.194:61201
173.21.10.71:2222
102.65.38.67:443
89.137.52.44:443
121.74.187.191:995
45.46.53.140:2222
120.61.3.199:443
58.105.167.35:50000
175.137.153.178:443
71.74.12.34:443
41.13.143.139:443
76.25.142.196:443
208.107.221.224:443
76.69.155.202:2222
73.151.236.31:443
189.253.111.123:995
109.12.111.14:443
86.198.170.170:2222
75.188.35.168:443
105.184.249.182:995
161.142.63.168:443
68.204.7.158:443
86.98.148.18:995
86.139.33.187:443
2.51.171.43:995
101.50.110.176:995
103.230.180.119:443
70.51.153.159:2222
189.146.51.56:443
76.169.147.192:32103
186.64.67.28:443
31.215.70.101:443
41.230.62.211:993
197.240.236.170:443
197.165.161.159:995
81.213.206.182:443
206.217.0.154:995
75.67.194.204:443
191.99.191.28:443
216.46.32.83:443
64.231.96.211:2222
70.57.207.83:443
186.69.101.54:443
72.252.201.34:990
201.103.17.10:443
40.134.247.125:995
47.156.191.217:443
100.1.108.246:443
47.158.25.67:443
67.165.206.193:993
72.252.201.34:993
39.52.196.53:995
72.252.201.34:995
208.101.87.135:443
190.206.211.182:443
31.35.28.29:443
69.14.172.24:443
70.45.27.254:443
69.144.42.24:443
78.101.152.231:61202
196.203.37.215:80
103.116.178.85:443
86.98.11.110:443
98.14.54.50:443
136.232.34.70:443
203.101.178.94:443
89.249.215.26:443
217.164.121.201:2222
111.125.245.118:995
1.161.108.147:995
1.161.108.147:443
41.84.224.185:443
103.87.95.131:2222
78.96.235.245:443
173.220.98.101:443
94.59.58.249:1194
190.200.231.217:61202

Attributes

salt
jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

- Target
  9ae13c19261bfaabaaf173c24d895e19fa751373749f17058e288dc5c6a481a0
- Size 415KB
- SHA256 9ae13c19261bfaabaaf173c24d895e19fa751373749f17058e288dc5c6a481a0
- MD5 b7f49ef3c46285f9f4bc49a3bb6389a1
- SHA1 0a8ae017dbe1190b55ca69e1edfccb365aaf7981
- SHA512 6c897a5476c22366c91e9cae97a3df9dd4d87f4283f3640f0d6ac2b3e08658e285b2d759cd418218fed9d33c527656f669a6491a300bb87552d85b9ec4704edb
- MD5 SHA1 SHA512
Score

10^/10

qakbot obama160 1646042914 banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Extracted

Targets

Qakbot/Qbot

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2