qakbot | f57777047e945d21b560a6f00596c35437281205a5a97709b17254bae55b304c

General

Target

f57777047e945d21b560a6f00596c35437281205a5a97709b17254bae55b304c
Size

1.1MB
Sample

220417-rrslmaafg8
MD5

54c197cfacfed67a10abeb0ac69cd6c1
SHA1

586be7f3b54bde0038941c54c7793620be3040a4
SHA256

f57777047e945d21b560a6f00596c35437281205a5a97709b17254bae55b304c
SHA512

f646d5754383d1427a078695a16f4aed3154c87b278dd5f50c61ea8bcc03657bce6a184b323d1518a90c3d7d5939949968777fd0e0bb681ea1e73d387540f98f

Score

10^/10

Malware Config

Extracted

Family

qakbot

Version

325.43

Botnet

abc023

Campaign

1603362336

C2

207.246.75.201:443

93.86.1.140:995

78.96.199.79:443

185.246.9.69:995

80.14.209.42:2222

72.186.1.237:443

92.59.35.196:2222

45.32.154.10:443

74.129.26.119:443

186.6.196.12:443

5.13.69.214:443

80.240.26.178:443

203.198.96.200:443

108.31.15.10:995

86.98.89.139:2222

156.213.186.133:443

72.36.59.46:2222

5.193.181.221:2078

59.99.39.32:443

108.46.145.30:443

Targets

- Target
  
  f57777047e945d21b560a6f00596c35437281205a5a97709b17254bae55b304c
- Size
  
  1.1MB
- MD5
  
  54c197cfacfed67a10abeb0ac69cd6c1
- SHA1
  
  586be7f3b54bde0038941c54c7793620be3040a4
- SHA256
  
  f57777047e945d21b560a6f00596c35437281205a5a97709b17254bae55b304c
- SHA512
  
  f646d5754383d1427a078695a16f4aed3154c87b278dd5f50c61ea8bcc03657bce6a184b323d1518a90c3d7d5939949968777fd0e0bb681ea1e73d387540f98f
Score

10^/10

qakbot abc023 1603362336 banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Remote System Discovery

1

T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Qakbot/Qbot

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2