Overview

overview

10

Static

static

ofTake.db.dll

windows7-x64

10

ofTake.db.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ofTake.db.dll

  • Size

    639KB

  • Sample

    220916-vrzxgscacr

  • MD5

    fc7120dfbd08e8330026e63b88ddd45a

  • SHA1

    0f7fd4bf22ac252ce7d4407160d70c05f4ebfa5f

  • SHA256

    fe481c946b397fcbad882f8a419fd0e6e227c0564aa128c820b7096bc2fe1ae0

  • SHA512

    aa83d80283677263d63fe89180ebedf4aaa61d3e8b16555b77632454078c20eb37c5ad95c94a6072694f23bf6160b77a2e3fcef9a2e898ee82cd1be4b6cc74c9

  • SSDEEP

    12288:GOSe1J015+z6oZZdf/zxY5lbV6dR84Q7yLCgsy:9j1y5+z6oLdzxm0b8eTs

Score
10/10
qakbotobama2031663242106bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

403.892

Botnet

obama203

Campaign

1663242106

C2

81.131.161.131:2078

217.165.85.223:993

37.210.148.30:995

200.161.62.126:32101

78.100.225.34:2222

119.82.111.158:443

66.181.164.43:443

134.35.13.45:443

193.3.19.37:443

99.232.140.205:2222

197.94.210.133:443

87.243.113.104:995

84.38.133.191:443

14.184.97.67:443

123.240.131.1:443

194.166.207.160:995

78.168.87.170:2222

180.180.131.95:443

41.96.56.224:443

190.44.40.48:995
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      ofTake.db.dll

    • Size

      639KB

    • MD5

      fc7120dfbd08e8330026e63b88ddd45a

    • SHA1

      0f7fd4bf22ac252ce7d4407160d70c05f4ebfa5f

    • SHA256

      fe481c946b397fcbad882f8a419fd0e6e227c0564aa128c820b7096bc2fe1ae0

    • SHA512

      aa83d80283677263d63fe89180ebedf4aaa61d3e8b16555b77632454078c20eb37c5ad95c94a6072694f23bf6160b77a2e3fcef9a2e898ee82cd1be4b6cc74c9

    • SSDEEP

      12288:GOSe1J015+z6oZZdf/zxY5lbV6dR84Q7yLCgsy:9j1y5+z6oLdzxm0b8eTs

    Score
    10/10
    qakbotobama2031663242106bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks