Overview

overview

10

Static

static

couldShe.dll

windows7-x64

10

couldShe.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    couldShe.zip

  • Size

    357KB

  • Sample

    220916-py2f1abedl

  • MD5

    e6cd1e9dd5fc4d4b684e0bdbd57a0f7c

  • SHA1

    4a7fb3575d0b9e72e465b97962b207592a2bfa99

  • SHA256

    a0a46870841f7425592a966d3a9499b9a589b2037221f411d184a0ccf8c2ddb1

  • SHA512

    bd0895622ca74af1409a8f3ac35bd611969600e92bb3ab7cca89c198f93352df75d661d89305f835e1a3a974a7df84a34bdc7727e5395aec9dac059fe26a423a

  • SSDEEP

    6144:ePQ7nOuF/4YfzpTtRct7N9U2wtDb3Z1rKb1kR58j8ay725kcmV4Evd:vnOuqYfzp56t7U2CbJhig548l9Sm

Score
10/10
qakbotobama2031663242106bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

403.892

Botnet

obama203

Campaign

1663242106

C2

81.131.161.131:2078

217.165.85.223:993

37.210.148.30:995

200.161.62.126:32101

78.100.225.34:2222

119.82.111.158:443

66.181.164.43:443

134.35.13.45:443

193.3.19.37:443

99.232.140.205:2222

197.94.210.133:443

87.243.113.104:995

84.38.133.191:443

14.184.97.67:443

123.240.131.1:443

194.166.207.160:995

78.168.87.170:2222

180.180.131.95:443

41.96.56.224:443

190.44.40.48:995
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      couldShe.dll

    • Size

      639KB

    • MD5

      ef6629085c81f89371f833d45a176c7e

    • SHA1

      06f060cb10fc9bd65ab5c0cb87fe612e9c0b2713

    • SHA256

      a8c233d48ae691798f2977d7fd4c024ae51081384aa277cec3be583f595dcb07

    • SHA512

      5fb95b94a6d304e2461f4320ec2817fb040dba4511111c29d7ee00e94a6e7116889a554d7758c3f2f705b293474967d46c7e2a58f45b8616cd1bc79274309352

    • SSDEEP

      12288:GOSe1J015+z6oZZdf/zxY5lbVCdR84Q7yLCgsy:9j1y5+z6oLdzxmcb8eTs

    Score
    10/10
    qakbotobama2031663242106bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks