qakbot | 7b224bd513e9d6cc35ee46f1ee4322f91b93667e4048caa264bd15c6ba2799df

General

Target

7533.dll
Size

663KB
Sample

220715-pqzmfabfcr
MD5

301747865a880d14f58aa3bb0748c6e8
SHA1

3453a3a7f5d1d5d4df7554931dfebafcd1182191
SHA256

7b224bd513e9d6cc35ee46f1ee4322f91b93667e4048caa264bd15c6ba2799df
SHA512

922fc506a3fecfcd6f88a1cb00059f2882a2696aa059f56b884ba1d6d6df5a4893525b73e5cd2c0b8b24dff8ad886279a174f687b40e00bbb52a9467379037f2

Score

10^/10

Malware Config

Extracted

Family

qakbot

Version

403.780

Botnet

obama201

Campaign

1657815129

C2

70.46.220.114:443

179.111.8.52:32101

208.107.221.224:443

176.45.218.138:995

24.158.23.166:995

24.54.48.11:443

89.101.97.139:443

24.55.67.176:443

24.139.72.117:443

120.150.218.241:995

174.69.215.101:443

38.70.253.226:2222

41.228.22.180:443

217.165.157.202:995

172.115.177.204:2222

173.21.10.71:2222

69.14.172.24:443

47.23.89.60:993

104.34.212.7:32103

66.230.104.103:443

Attributes

salt
jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

- Target
  
  7533.dll
- Size
  
  663KB
- MD5
  
  301747865a880d14f58aa3bb0748c6e8
- SHA1
  
  3453a3a7f5d1d5d4df7554931dfebafcd1182191
- SHA256
  
  7b224bd513e9d6cc35ee46f1ee4322f91b93667e4048caa264bd15c6ba2799df
- SHA512
  
  922fc506a3fecfcd6f88a1cb00059f2882a2696aa059f56b884ba1d6d6df5a4893525b73e5cd2c0b8b24dff8ad886279a174f687b40e00bbb52a9467379037f2
Score

10^/10

qakbot obama201 1657815129 banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

1

T1053

Persistence

Scheduled Task

1

T1053

Privilege Escalation

Scheduled Task

1

T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Qakbot/Qbot

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2