qakbot | 38a12269557615ff1a79f306e3d2de1aefc320522ff97de42d2020d0dbda95ae

Sharing

Copy URL Twitter E-mail

General

Target
38a12269557615ff1a79f306e3d2de1aefc320522ff97de42d2020d0dbda95ae
Size 306KB
Sample220622-2hmzwsdea9
SHA256 38a12269557615ff1a79f306e3d2de1aefc320522ff97de42d2020d0dbda95ae
MD5 c4d15158b46b7d3802761b47ad4bd7d9
SHA1 e6a4a30fd4df6385bd8459eaf3e2d81dd543c893
SHA512 d99b1fdd7c270de81cbd0a802ab18b4e0f2a28c010b6d52ca6a8579f088778c9de65f2945759689d7b5f37249ca46e7c1f2b810bca0449ba9b324e6ad79a5369
MD5 SHA1 SHA512

Score

10^/10

Malware Config

Extracted

Family

qakbot

Version

403.780

Botnet

obama191

Campaign

1655884897

189.78.107.163:32101
182.191.92.203:995
117.248.109.38:21
84.241.8.23:32103
74.14.5.179:2222
71.13.93.154:2222
193.253.44.249:2222
108.60.213.141:443
217.128.122.65:2222
39.41.89.221:995
70.51.132.161:2222
70.46.220.114:443
24.43.99.75:443
32.221.224.140:995
67.209.195.198:443
40.134.246.185:995
67.165.206.193:993
1.161.124.241:443
45.241.205.91:993
93.48.80.198:995
148.64.96.100:443
186.90.153.162:2222
100.38.242.113:995
80.11.74.81:2222
202.134.152.2:2222
210.246.4.69:995
41.228.22.180:443
104.34.212.7:32103
24.178.196.158:2222
78.176.146.141:443
39.49.9.134:995
38.70.253.226:2222
47.23.89.60:993
120.150.218.241:995
197.89.128.138:443
208.107.221.224:443
92.137.225.8:2222
1.161.124.241:995
2.34.12.8:443
176.205.21.139:2222
176.45.232.204:995
176.205.21.139:1194
5.32.41.45:443
94.59.252.166:2222
86.98.157.42:993
91.177.173.10:995
173.21.10.71:2222
69.14.172.24:443
45.46.53.140:2222
148.0.43.48:443
121.7.223.45:2222
172.115.177.204:2222
81.193.30.90:443
187.208.115.219:443
187.250.202.2:443
47.156.131.10:443
72.252.157.93:995
72.252.157.93:990
72.252.157.93:993
76.25.142.196:443
177.45.64.254:32101
24.139.72.117:443
24.55.67.176:443
109.12.111.14:443
68.204.15.28:443
179.158.105.44:443
197.94.94.206:443
90.120.209.197:2078
188.136.218.225:61202
87.109.229.215:995
63.143.92.99:995
102.182.232.3:995
86.132.14.70:2078
196.203.37.215:80
81.250.191.49:2222
111.125.245.116:995
37.34.253.233:443
191.250.120.152:443
83.110.94.105:443
201.176.6.24:995
173.174.216.62:443
39.52.59.14:995
31.215.70.37:443
175.145.235.37:443
174.69.215.101:443
187.172.164.12:443
201.172.23.68:2222
41.84.249.56:995
162.252.222.118:443
191.34.121.84:443
113.53.152.11:443
86.195.158.178:2222
39.57.60.246:995
109.228.220.196:443
82.41.63.217:443
82.152.39.39:443
106.51.48.188:50001
103.246.242.202:443
94.36.193.176:2222
41.38.167.179:995
98.50.191.202:443
190.252.242.69:443
89.101.97.139:443
185.56.243.146:443
186.105.113.65:443
39.44.30.209:995
47.157.227.70:443
187.251.132.144:22
31.35.28.29:443
148.252.133.168:443
42.103.128.35:2222
180.129.108.214:995
138.186.28.253:443
184.97.29.26:443
89.137.52.44:443
120.61.2.218:443
122.118.131.132:995
101.50.110.17:995
89.86.33.217:443
75.99.168.194:61201
103.91.182.114:2222
37.210.156.247:2222
58.105.167.36:50000
187.207.131.50:61202
76.70.9.169:2222
189.253.206.105:443
176.67.56.94:443
103.116.178.85:995
143.0.219.6:995
79.80.80.29:2222
37.186.58.115:995
96.37.113.36:993
37.208.128.172:6883

Attributes

salt
jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

- Target
  38a12269557615ff1a79f306e3d2de1aefc320522ff97de42d2020d0dbda95ae
- Size 306KB
- SHA256 38a12269557615ff1a79f306e3d2de1aefc320522ff97de42d2020d0dbda95ae
- MD5 c4d15158b46b7d3802761b47ad4bd7d9
- SHA1 e6a4a30fd4df6385bd8459eaf3e2d81dd543c893
- SHA512 d99b1fdd7c270de81cbd0a802ab18b4e0f2a28c010b6d52ca6a8579f088778c9de65f2945759689d7b5f37249ca46e7c1f2b810bca0449ba9b324e6ad79a5369
- MD5 SHA1 SHA512
Score

10^/10

qakbot obama191 1655884897 banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

T1053

Persistence

Scheduled Task

T1053

Privilege Escalation

Scheduled Task

T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Qakbot/Qbot

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2