qakbot | cb532c1e388c37a7106bc49f3eb389496e9cd961c5cb23c88b64c9f46f71ab10

General

Target

cb532c1e388c37a7106bc49f3eb389496e9cd961c5cb23c88b64c9f46f71ab10
Size

1.1MB
Sample

220417-rr4nwsfhgn
MD5

accc28c13b07ae48d52c440775161a25
SHA1

9ddc1ba1f541ad241a3e1c68b7a26fe04237abea
SHA256

cb532c1e388c37a7106bc49f3eb389496e9cd961c5cb23c88b64c9f46f71ab10
SHA512

db234d51099740c338d24f0f2204d5a88413746c6b33352c2caffb958478f1923ee91e1b13f8d1716b3bc30c2d0919a9e977191436afa3f1656b59b67ef2145f

Score

10^/10

Malware Config

Extracted

Family

qakbot

Version

325.43

Botnet

abc023

Campaign

1603362336

C2

207.246.75.201:443

93.86.1.140:995

78.96.199.79:443

185.246.9.69:995

80.14.209.42:2222

72.186.1.237:443

92.59.35.196:2222

45.32.154.10:443

74.129.26.119:443

186.6.196.12:443

5.13.69.214:443

80.240.26.178:443

203.198.96.200:443

108.31.15.10:995

86.98.89.139:2222

156.213.186.133:443

72.36.59.46:2222

5.193.181.221:2078

59.99.39.32:443

108.46.145.30:443

Targets

- Target
  
  cb532c1e388c37a7106bc49f3eb389496e9cd961c5cb23c88b64c9f46f71ab10
- Size
  
  1.1MB
- MD5
  
  accc28c13b07ae48d52c440775161a25
- SHA1
  
  9ddc1ba1f541ad241a3e1c68b7a26fe04237abea
- SHA256
  
  cb532c1e388c37a7106bc49f3eb389496e9cd961c5cb23c88b64c9f46f71ab10
- SHA512
  
  db234d51099740c338d24f0f2204d5a88413746c6b33352c2caffb958478f1923ee91e1b13f8d1716b3bc30c2d0919a9e977191436afa3f1656b59b67ef2145f
Score

10^/10

qakbot abc023 1603362336 banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Remote System Discovery

1

T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Qakbot/Qbot

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2