qakbot | 44ad0b2d97dd7048629bab7080f324a567f6fbb4739989688102ab50c8ba5a64

General

Target

44ad0b2d97dd7048629bab7080f324a567f6fbb4739989688102ab50c8ba5a64
Size

1.1MB
Sample

220417-rtf1lsagd2
MD5

88eafa05213090f736b2ef924f2d57a1
SHA1

67bc9b8fae20a7c18b20005ad4b5bc13b8fb8486
SHA256

44ad0b2d97dd7048629bab7080f324a567f6fbb4739989688102ab50c8ba5a64
SHA512

f310d8acecb44f94d04d3d8c03087f5eb7d5226603036df295e5b4600363c2876a7525ef90b562ed7c77bcc02455ecdf573dbe03eecc45845e5ec374f6ce3c50

Score

10^/10

Malware Config

Extracted

Family

qakbot

Version

325.43

Botnet

abc023

Campaign

1603362336

C2

207.246.75.201:443

93.86.1.140:995

78.96.199.79:443

185.246.9.69:995

80.14.209.42:2222

72.186.1.237:443

92.59.35.196:2222

45.32.154.10:443

74.129.26.119:443

186.6.196.12:443

5.13.69.214:443

80.240.26.178:443

203.198.96.200:443

108.31.15.10:995

86.98.89.139:2222

156.213.186.133:443

72.36.59.46:2222

5.193.181.221:2078

59.99.39.32:443

108.46.145.30:443

Targets

- Target
  
  44ad0b2d97dd7048629bab7080f324a567f6fbb4739989688102ab50c8ba5a64
- Size
  
  1.1MB
- MD5
  
  88eafa05213090f736b2ef924f2d57a1
- SHA1
  
  67bc9b8fae20a7c18b20005ad4b5bc13b8fb8486
- SHA256
  
  44ad0b2d97dd7048629bab7080f324a567f6fbb4739989688102ab50c8ba5a64
- SHA512
  
  f310d8acecb44f94d04d3d8c03087f5eb7d5226603036df295e5b4600363c2876a7525ef90b562ed7c77bcc02455ecdf573dbe03eecc45845e5ec374f6ce3c50
Score

10^/10

qakbot abc023 1603362336 banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1

T1082

Remote System Discovery

1

T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Qakbot/Qbot

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2