Overview

overview

10

Static

static

757f0349b0...9a.dll

windows7_x64

10

757f0349b0...9a.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    757f0349b0235280cafd6ea8b3ed83ab97ebe34b56fc8d0031c3ad591145699a

  • Size

    267KB

  • Sample

    220309-b4azcaeghm

  • MD5

    6ddd304cc3a1933d17d087585ec20c51

  • SHA1

    190d0f4c1abaf5522279b8dfdd4e64de4a9068cd

  • SHA256

    757f0349b0235280cafd6ea8b3ed83ab97ebe34b56fc8d0031c3ad591145699a

  • SHA512

    cc29d65a80b30f2b047d73844723e9ddfcdb7d7703bb43d0646827052080a445a5f84dcc6bc339c08cae747678d5a14434e369bce9b78456e4a6c0287cebc970

Score
10/10
qakbottr021606748059bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

401.29

Botnet

tr02

Campaign

1606748059

C2

197.45.110.165:995

86.99.134.235:2222

174.76.21.134:443

208.99.100.129:443

86.126.198.195:443

185.105.131.233:443

85.132.36.111:2222

105.198.236.101:443

2.49.219.254:22

217.165.2.92:995

67.6.54.180:443

5.193.115.251:2222

83.196.50.197:2222

89.3.198.238:443

94.141.3.242:443

73.239.229.107:995

217.165.15.245:2222

68.225.60.77:995

85.121.42.12:443

99.240.226.2:443
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      757f0349b0235280cafd6ea8b3ed83ab97ebe34b56fc8d0031c3ad591145699a

    • Size

      267KB

    • MD5

      6ddd304cc3a1933d17d087585ec20c51

    • SHA1

      190d0f4c1abaf5522279b8dfdd4e64de4a9068cd

    • SHA256

      757f0349b0235280cafd6ea8b3ed83ab97ebe34b56fc8d0031c3ad591145699a

    • SHA512

      cc29d65a80b30f2b047d73844723e9ddfcdb7d7703bb43d0646827052080a445a5f84dcc6bc339c08cae747678d5a14434e369bce9b78456e4a6c0287cebc970

    Score
    10/10
    qakbottr021606748059bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks