Overview

overview

10

Static

static

f8dc9b3578...7a.dll

windows7_x64

10

f8dc9b3578...7a.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f8dc9b3578657deba5fabf7ed8698f93c780ea010003430159c75388c3bc807a

  • Size

    2.0MB

  • Sample

    220319-mzdp8agccj

  • MD5

    8803f52808179517f291d3ddf10c19ea

  • SHA1

    79ba272c20e018f7dd2fc7368fbac4aa1eacaf42

  • SHA256

    f8dc9b3578657deba5fabf7ed8698f93c780ea010003430159c75388c3bc807a

  • SHA512

    7736340db9065fe8668d21768d78a2ca3bf16760c8c3e8df72790b8415e6b8041e488934b044ca1c576010b6513f11e7a56bd31aa18314ba13bd541675a96173

Score
10/10
qakbotabc1101607524278bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Attributes
  • salt

    �O}�

Extracted

Family

qakbot

Version

401.72

Botnet

abc110

Campaign

1607524278

C2

78.63.226.32:443

72.252.201.69:443

68.190.152.98:443

72.240.200.181:2222

216.137.142.200:2222

87.27.110.90:2222

94.69.242.254:2222

189.183.209.211:443

94.26.119.221:443

186.189.208.238:443

161.199.180.159:443

197.45.110.165:995

83.110.221.218:443

105.198.236.99:443

83.110.158.22:2222

24.37.178.158:443

185.105.131.233:443

79.101.206.250:995

92.154.83.96:2078

83.202.68.220:2222
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      f8dc9b3578657deba5fabf7ed8698f93c780ea010003430159c75388c3bc807a

    • Size

      2.0MB

    • MD5

      8803f52808179517f291d3ddf10c19ea

    • SHA1

      79ba272c20e018f7dd2fc7368fbac4aa1eacaf42

    • SHA256

      f8dc9b3578657deba5fabf7ed8698f93c780ea010003430159c75388c3bc807a

    • SHA512

      7736340db9065fe8668d21768d78a2ca3bf16760c8c3e8df72790b8415e6b8041e488934b044ca1c576010b6513f11e7a56bd31aa18314ba13bd541675a96173

    Score
    10/10
    qakbotabc1101607524278bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks