Overview

overview

10

Static

static

basements.dll

windows7-x64

10

basements.dll

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    basements.dat

  • Size

    728KB

  • Sample

    221026-rcdtxsgabl

  • MD5

    59f01fda3f165e4c78b3e006b29babe7

  • SHA1

    2d457afe90d077b3ab7815c05ad2111ebb265e8c

  • SHA256

    1e456840791b38b8de26965919e367cb9cab731aeeb350073a09224feb6d3e75

  • SHA512

    a7599a7c75096d254f045e27ee46bb23e11ad32c1f5cce09a80fc2e3b0f1b816fce4158aa09bb48c5ea6e0ca387419382e6c30e35786be7805295494e029e18c

  • SSDEEP

    12288:9Zvx07iKfDISZYRobaZ0UrIBfUQ0eIkM4WV6nwldJOCPrHuD5:9ta1DjZBBAgdxM4F6dMCjHu

Score
10/10
qakbotobama2161666689942bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

403.1051

Botnet

obama216

Campaign

1666689942

C2

24.116.45.121:443

24.206.27.39:443

71.199.168.185:443

70.115.104.126:443

190.24.45.24:995

24.9.220.167:443

68.62.199.70:443

43.241.159.238:443

113.162.196.232:443

156.217.60.239:995

197.204.70.167:443

197.202.196.43:443

24.130.228.100:443

41.109.228.108:995

64.123.103.123:443

190.193.180.228:443

24.177.111.153:443

60.54.65.27:443

189.129.38.158:2222

206.1.164.250:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      basements.dat

    • Size

      728KB

    • MD5

      59f01fda3f165e4c78b3e006b29babe7

    • SHA1

      2d457afe90d077b3ab7815c05ad2111ebb265e8c

    • SHA256

      1e456840791b38b8de26965919e367cb9cab731aeeb350073a09224feb6d3e75

    • SHA512

      a7599a7c75096d254f045e27ee46bb23e11ad32c1f5cce09a80fc2e3b0f1b816fce4158aa09bb48c5ea6e0ca387419382e6c30e35786be7805295494e029e18c

    • SSDEEP

      12288:9Zvx07iKfDISZYRobaZ0UrIBfUQ0eIkM4WV6nwldJOCPrHuD5:9ta1DjZBBAgdxM4F6dMCjHu

    Score
    10/10
    qakbotobama2161666689942bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks