Overview

overview

10

Static

static

10488424ab...0c.dll

windows7_x64

10

10488424ab...0c.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    10488424abb122e78db6f8a541cdee0c

  • Size

    1.7MB

  • Sample

    220408-r5y1kadge6

  • MD5

    10488424abb122e78db6f8a541cdee0c

  • SHA1

    b875217c74ee9e6b5700f8ee1ff93f747b22f0ef

  • SHA256

    1076e14a815bd7b72ad54ebb5ad568da9b20a85572fe01506ec6b1196f1c5e80

  • SHA512

    4d327626d05c7c3bac3dcf0a84de3e5aff4824c134c2c2a6732c24e556879995898f5a883f2b7312b3f48a4f68a236732c45493a558362e6eb53d580fcecf48c

Score
10/10
qakbotaa1649273304bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

403.573

Botnet

AA

Campaign

1649273304

C2

83.110.75.97:2222

47.23.89.62:993

187.207.48.194:61202

45.63.1.12:995

140.82.63.183:995

45.76.167.26:995

140.82.63.183:443

144.202.2.175:995

144.202.3.39:443

149.28.238.199:443

144.202.3.39:995

45.63.1.12:443

149.28.238.199:995

45.76.167.26:443

144.202.2.175:443

100.1.108.246:443

32.221.224.140:995

24.55.67.176:443

31.35.28.29:443

70.51.134.168:2222
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      10488424abb122e78db6f8a541cdee0c

    • Size

      1.7MB

    • MD5

      10488424abb122e78db6f8a541cdee0c

    • SHA1

      b875217c74ee9e6b5700f8ee1ff93f747b22f0ef

    • SHA256

      1076e14a815bd7b72ad54ebb5ad568da9b20a85572fe01506ec6b1196f1c5e80

    • SHA512

      4d327626d05c7c3bac3dcf0a84de3e5aff4824c134c2c2a6732c24e556879995898f5a883f2b7312b3f48a4f68a236732c45493a558362e6eb53d580fcecf48c

    Score
    10/10
    qakbotaa1649273304bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks