Overview

overview

10

Static

static

sheUp.db.dll

windows7-x64

10

sheUp.db.dll

windows10-2004-x64

10

Resubmissions

15-09-2022 15:19

220915-sqlx5addf6 10

15-09-2022 15:14

220915-smbb8adde8 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    sheUp.db.dll

  • Size

    639KB

  • Sample

    220915-sqlx5addf6

  • MD5

    baa6798c1674853f7dcf003b78ee79ed

  • SHA1

    33ac6d3c9c7f82544acf9bc6785dd93346066811

  • SHA256

    01cd0c3b1d2de2223fc32d6f96ed98d198c207c19ae6cf4b22ee5af556c40f31

  • SHA512

    65757e3c02a1afb9fccb9a50b138bc811cddde2750cb104b9473e5b79bb52fd29ec9f9abd01bc0fe238005a0fcce681e96153e0d2ec80cc526ffc8d2db179db5

  • SSDEEP

    12288:GOSe1J015+z6oZZdf/zxY5lbV6hJ84Q7yLCgsy:9j1y5+z6oLdzxmkf8eTs

Score
10/10
qakbotbb1663241231bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

403.892

Botnet

BB

Campaign

1663241231

C2

81.131.161.131:2078

217.165.85.223:993

37.210.148.30:995

200.161.62.126:32101

78.100.225.34:2222

119.82.111.158:443

66.181.164.43:443

134.35.13.45:443

193.3.19.37:443

99.232.140.205:2222

197.94.210.133:443

87.243.113.104:995

84.38.133.191:443

14.184.97.67:443

123.240.131.1:443

194.166.207.160:995

78.168.87.170:2222

180.180.131.95:443

41.99.21.248:443

190.44.40.48:995
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      sheUp.db.dll

    • Size

      639KB

    • MD5

      baa6798c1674853f7dcf003b78ee79ed

    • SHA1

      33ac6d3c9c7f82544acf9bc6785dd93346066811

    • SHA256

      01cd0c3b1d2de2223fc32d6f96ed98d198c207c19ae6cf4b22ee5af556c40f31

    • SHA512

      65757e3c02a1afb9fccb9a50b138bc811cddde2750cb104b9473e5b79bb52fd29ec9f9abd01bc0fe238005a0fcce681e96153e0d2ec80cc526ffc8d2db179db5

    • SSDEEP

      12288:GOSe1J015+z6oZZdf/zxY5lbV6hJ84Q7yLCgsy:9j1y5+z6oLdzxmkf8eTs

    Score
    10/10
    qakbotbb1663241231bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks