Overview

overview

10

Static

static

Contract.lnk

windows7-x64

3

Contract.lnk

windows10-2004-x64

3

publish/ir...ss.cmd

windows7-x64

1

publish/ir...ss.cmd

windows10-2004-x64

1

publish/pebbles.dll

windows7-x64

10

publish/pebbles.dll

windows10-2004-x64

10

publish/pe...sh.vbs

windows7-x64

3

publish/pe...sh.vbs

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Contract#6067.iso
  • Size 1.1MB
  • Sample221003-snfnbscde3
  • SHA256 5578fbc2b70fb9c4a49bfb8b7b6fbe945febee193699fcc9c2aa46675d86f778
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
qakbotbankerstealertrojan

Malware Config

Extracted

Family

  • qakbot

C2

  • 99.221.33.122:35602

  • 29.202.180.222:51620

  • 23.94.40.182:4331

  • 34.19.16.166:1288

  • 241.163.135.223:50051

  • 32.107.156.85:19172

  • 228.49.142.11:64889

  • 196.202.140.31:7400

  • 110.114.87.194:23019

  • 217.188.119.28:9613

  • 29.44.169.79:27952

  • 169.83.63.109:46511

  • 47.65.80.200:49855

  • 50.140.194.100:14738

  • 152.64.159.219:41214

  • 12.255.117.222:36282

  • 199.246.11.177:40851

  • 81.180.116.241:1057

  • 87.3.215.226:21496

  • 247.44.83.206:32161

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target
      Contract.lnk
    • Size 1KB
    • SHA256 6ec0ba7e0db0e097c729bf9cf80b270f0d8f7e7314cec7bf30b8c644f866e584
    • MD5 SHA1 SHA512
    Score
    3/10
    behavioral1behavioral2
    • Target
      publish/irritationTemperateness.cmd
    • Size 61B
    • SHA256 ec9bed0d3bd243ae4db1d4c27642a363fa4f98dd13017f230cce0fb7324ed24b
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral3behavioral4
    • Target
      publish/pebbles.dat
    • Size 481KB
    • SHA256 1965dc57456d4fc01b6ce0f242d80776fe08a16354e6177255cba618348355ac
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    qakbotbankerstealertrojan
    behavioral5behavioral6
    • Target
      publish/perfunctorinessRehash.vbs
    • Size 237B
    • SHA256 c84838381dfad99dc6e26f0e413a38611feea4e8530abcee1b4260b82076551d
    • MD5 SHA1 SHA512
    Score
    3/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v6

Tasks