qakbot | 2136db7ce8900ed04d45272212de6b164daa34e9d456e59264094900cf3904d0

General

Target

malicious.file
Size

1.0MB
Sample

220623-rg7ykaddbk
MD5

5b662747b5caea8e6cc3291b6454f4a1
SHA1

12424cc3ddfcb9ee10e401734f0e8602bb74bd42
SHA256

2136db7ce8900ed04d45272212de6b164daa34e9d456e59264094900cf3904d0
SHA512

a719fff77f2b73dee3ee965c3cd6c3b4a9420afdfe481fac42b91a724d3bafcf5db9095add1240e570bf9a98af93c767427b93c1ab70aba6a89381e5b01d5ffe

Score

10^/10

qakbot aa 1655971687 banker stealer trojan

Malware Config

Extracted

Family

qakbot

Version

403.780

Botnet

AA

Campaign

1655971687

C2

38.70.253.226:2222

47.23.89.60:993

120.150.218.241:995

117.248.109.38:21

37.34.253.233:443

86.132.14.70:2078

111.125.245.116:995

217.165.85.191:993

176.45.232.204:995

5.32.41.45:443

93.48.80.198:995

100.38.242.113:995

94.59.252.166:2222

74.14.5.179:2222

71.13.93.154:2222

193.253.44.249:2222

108.60.213.141:443

45.241.231.78:993

217.128.122.65:2222

40.134.246.185:995

Attributes

salt
jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

- Target
  
  malicious.file
- Size
  
  1.0MB
- MD5
  
  5b662747b5caea8e6cc3291b6454f4a1
- SHA1
  
  12424cc3ddfcb9ee10e401734f0e8602bb74bd42
- SHA256
  
  2136db7ce8900ed04d45272212de6b164daa34e9d456e59264094900cf3904d0
- SHA512
  
  a719fff77f2b73dee3ee965c3cd6c3b4a9420afdfe481fac42b91a724d3bafcf5db9095add1240e570bf9a98af93c767427b93c1ab70aba6a89381e5b01d5ffe
Score

10^/10

qakbot aa 1655971687 banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Extracted

Targets

Qakbot/Qbot

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2