qakbot | 4f5d9c94a635d8ae70aefcce4e3f27b9fadf5436e9e5b447f362490e7375ca34

General

Target

4f5d9c94a635d8ae70aefcce4e3f27b9fadf5436e9e5b447f362490e7375ca34
Size

500KB
Sample

220324-qt7ynaedaq
MD5

5bb3e4e714d35e992e024da58ceba4cc
SHA1

2013463b172b67eba71b9a267ce2128592c28faa
SHA256

4f5d9c94a635d8ae70aefcce4e3f27b9fadf5436e9e5b447f362490e7375ca34
SHA512

ab38f7e9cce8e0232240e6d109fdf6610f2dcec5ba7c43e279be6a377d422b46f35ad01efa1861f661de86cb5271ed3104cff341e479483492d4ee9d626209a3

Score

10^/10

Malware Config

Extracted

Family

qakbot

Version

401.29

Botnet

abc102

Campaign

1606735229

C2

98.26.50.62:995

98.4.227.199:443

106.51.52.111:443

2.88.53.159:995

83.196.50.197:2222

92.137.138.52:2222

89.33.87.107:443

185.105.131.233:443

80.106.85.24:2222

197.161.154.132:443

79.129.121.81:995

217.133.54.140:32100

118.70.55.146:443

86.97.221.121:443

194.243.78.225:443

87.27.110.90:2222

196.151.252.84:443

85.121.42.12:443

90.23.117.67:2222

197.45.110.165:995

Attributes

salt
jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

- Target
  
  4f5d9c94a635d8ae70aefcce4e3f27b9fadf5436e9e5b447f362490e7375ca34
- Size
  
  500KB
- MD5
  
  5bb3e4e714d35e992e024da58ceba4cc
- SHA1
  
  2013463b172b67eba71b9a267ce2128592c28faa
- SHA256
  
  4f5d9c94a635d8ae70aefcce4e3f27b9fadf5436e9e5b447f362490e7375ca34
- SHA512
  
  ab38f7e9cce8e0232240e6d109fdf6610f2dcec5ba7c43e279be6a377d422b46f35ad01efa1861f661de86cb5271ed3104cff341e479483492d4ee9d626209a3
Score

10^/10

qakbot abc102 1606735229 banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

Peripheral Device Discovery

1

T1120

System Information Discovery

1

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Qakbot/Qbot

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2