Overview

overview

10

Static

static

cfa05e3128...69.dll

windows7_x64

10

cfa05e3128...69.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cfa05e312817308419c0946f7501af155af32f3baf9cc856d19367953cad0169

  • Size

    1.0MB

  • Sample

    220620-dhcbdscccn

  • MD5

    3bd8e5cd43e2c8f99abe950259495496

  • SHA1

    b220772ba0a02d6bc940b623e2251e0ea7761b2f

  • SHA256

    cfa05e312817308419c0946f7501af155af32f3baf9cc856d19367953cad0169

  • SHA512

    5f6c4f2bd1a04b90cac03c3d8aaa458ad896685a6d1692fae62a2f54a2c45ac821b2d1a7fb5196660ee8fe6096f8fb7d0840b1c719f20c2586044e9137d0741a

Score
10/10
qakbotobama1891655107308bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

403.688

Botnet

obama189

Campaign

1655107308

C2

91.177.173.10:995

117.248.109.38:21

182.191.92.203:995

39.52.38.164:995

217.165.84.253:993

84.241.8.23:32103

82.152.39.39:443

202.134.152.2:2222

122.118.131.132:995

120.150.218.241:995

222.169.71.98:2222

37.34.253.233:443

93.48.80.198:995

148.0.55.173:443

175.145.235.37:443

41.130.140.32:993

120.61.0.71:443

89.101.97.139:443

62.204.41.187:443

62.204.41.187:2222
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      cfa05e312817308419c0946f7501af155af32f3baf9cc856d19367953cad0169

    • Size

      1.0MB

    • MD5

      3bd8e5cd43e2c8f99abe950259495496

    • SHA1

      b220772ba0a02d6bc940b623e2251e0ea7761b2f

    • SHA256

      cfa05e312817308419c0946f7501af155af32f3baf9cc856d19367953cad0169

    • SHA512

      5f6c4f2bd1a04b90cac03c3d8aaa458ad896685a6d1692fae62a2f54a2c45ac821b2d1a7fb5196660ee8fe6096f8fb7d0840b1c719f20c2586044e9137d0741a

    Score
    10/10
    qakbotobama1891655107308bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks