qakbot | 8819136aa0710329c509353252ae3caf8adb2170fd91d13afdf4acf4c579ea88

General

Target

8819136aa0710329c509353252ae3caf8adb2170fd91d13afdf4acf4c579ea88
Size

1.1MB
Sample

220417-rssb9aagb9
MD5

883f7d76588e6f374199d198a8a2b17b
SHA1

6f1460097b3fe951f2c90ec6f72ad0849c44e166
SHA256

8819136aa0710329c509353252ae3caf8adb2170fd91d13afdf4acf4c579ea88
SHA512

cf543b6d6295d2475129404e8259c931d007f1848857aa9982c949e7e6809beb2801971afc703d82bf2206c3f88fd8af9bdc3f09f1f9d1606d7b707c61803aaf

Score

10^/10

Malware Config

Extracted

Family

qakbot

Version

325.43

Botnet

abc023

Campaign

1603362336

C2

207.246.75.201:443

93.86.1.140:995

78.96.199.79:443

185.246.9.69:995

80.14.209.42:2222

72.186.1.237:443

92.59.35.196:2222

45.32.154.10:443

74.129.26.119:443

186.6.196.12:443

5.13.69.214:443

80.240.26.178:443

203.198.96.200:443

108.31.15.10:995

86.98.89.139:2222

156.213.186.133:443

72.36.59.46:2222

5.193.181.221:2078

59.99.39.32:443

108.46.145.30:443

Targets

- Target
  
  8819136aa0710329c509353252ae3caf8adb2170fd91d13afdf4acf4c579ea88
- Size
  
  1.1MB
- MD5
  
  883f7d76588e6f374199d198a8a2b17b
- SHA1
  
  6f1460097b3fe951f2c90ec6f72ad0849c44e166
- SHA256
  
  8819136aa0710329c509353252ae3caf8adb2170fd91d13afdf4acf4c579ea88
- SHA512
  
  cf543b6d6295d2475129404e8259c931d007f1848857aa9982c949e7e6809beb2801971afc703d82bf2206c3f88fd8af9bdc3f09f1f9d1606d7b707c61803aaf
Score

10^/10

qakbot abc023 1603362336 banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Remote System Discovery

1

T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Qakbot/Qbot

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2