qakbot | d00039f436c40d322b0fb66898983cdd5f2816b7024069c13528376fca8dbe04

General

Target

d00039f436c40d322b0fb66898983cdd5f2816b7024069c13528376fca8dbe04
Size

2.4MB
Sample

220708-rzcv5sgcd6
MD5

a3efb67aa1434cce1004a0c30e28834e
SHA1

e0bd99f7ac10f0989c1297e9a4b665e41164cf19
SHA256

d00039f436c40d322b0fb66898983cdd5f2816b7024069c13528376fca8dbe04
SHA512

ee55f63f0efefe4d3079461fdd62f6409cbe247b982cd91befcefc4c639d8bb63f77f7db4150f766357c809dab283686dc5834d81f2c144c3b8826afc61f6830

Score

10^/10

Malware Config

Extracted

Family

qakbot

Version

401.138

Botnet

abc114

Campaign

1608129413

C2

86.127.22.190:443

35.139.242.207:443

108.190.194.146:2222

187.213.199.54:443

68.83.89.188:443

41.233.152.232:993

196.151.252.84:443

181.208.249.141:443

172.87.134.226:443

96.27.47.70:2222

83.110.109.78:2222

93.86.1.159:995

217.162.149.212:443

80.11.210.247:443

72.252.201.69:443

185.163.221.77:2222

189.62.175.92:22

95.76.27.6:443

45.77.115.208:443

187.213.82.104:995

Attributes

salt
jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

- Target
  
  d00039f436c40d322b0fb66898983cdd5f2816b7024069c13528376fca8dbe04
- Size
  
  2.4MB
- MD5
  
  a3efb67aa1434cce1004a0c30e28834e
- SHA1
  
  e0bd99f7ac10f0989c1297e9a4b665e41164cf19
- SHA256
  
  d00039f436c40d322b0fb66898983cdd5f2816b7024069c13528376fca8dbe04
- SHA512
  
  ee55f63f0efefe4d3079461fdd62f6409cbe247b982cd91befcefc4c639d8bb63f77f7db4150f766357c809dab283686dc5834d81f2c144c3b8826afc61f6830
Score

10^/10

qakbot abc114 1608129413 banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1

T1053

Persistence

Scheduled Task

1

T1053

Privilege Escalation

Scheduled Task

1

T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Qakbot/Qbot

Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2