qakbot | c8de4d4778a62b9e2837224c5e70eb034639823cf7ef7b5d187ef7ab729d9c0c

General

Target

c8de4d4778a62b9e2837224c5e70eb034639823cf7ef7b5d187ef7ab729d9c0c
Size

1.1MB
Sample

220417-rr5wysaga2
MD5

94e1e30edc04f0aeac46c13f6f5f0e4a
SHA1

925070e888c2a610fc97b59e039d9166774d8cfd
SHA256

c8de4d4778a62b9e2837224c5e70eb034639823cf7ef7b5d187ef7ab729d9c0c
SHA512

c948adca3482b8af748f35af86ccb8ca1cc47cb8040678325ce2272cc0ae2443832cb5c43d7599cf7988ddf834e1487cfbc080de3de88a41274c0e81c9f35adf

Score

10^/10

Malware Config

Extracted

Family

qakbot

Version

325.43

Botnet

abc023

Campaign

1603362336

C2

207.246.75.201:443

93.86.1.140:995

78.96.199.79:443

185.246.9.69:995

80.14.209.42:2222

72.186.1.237:443

92.59.35.196:2222

45.32.154.10:443

74.129.26.119:443

186.6.196.12:443

5.13.69.214:443

80.240.26.178:443

203.198.96.200:443

108.31.15.10:995

86.98.89.139:2222

156.213.186.133:443

72.36.59.46:2222

5.193.181.221:2078

59.99.39.32:443

108.46.145.30:443

Targets

- Target
  
  c8de4d4778a62b9e2837224c5e70eb034639823cf7ef7b5d187ef7ab729d9c0c
- Size
  
  1.1MB
- MD5
  
  94e1e30edc04f0aeac46c13f6f5f0e4a
- SHA1
  
  925070e888c2a610fc97b59e039d9166774d8cfd
- SHA256
  
  c8de4d4778a62b9e2837224c5e70eb034639823cf7ef7b5d187ef7ab729d9c0c
- SHA512
  
  c948adca3482b8af748f35af86ccb8ca1cc47cb8040678325ce2272cc0ae2443832cb5c43d7599cf7988ddf834e1487cfbc080de3de88a41274c0e81c9f35adf
Score

10^/10

qakbot abc023 1603362336 banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Remote System Discovery

1

T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Qakbot/Qbot

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2