Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

ee5b6ba63d...f4.dll

windows7-x64

10

ee5b6ba63d...f4.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee5b6ba63d54fa7a7c3167e125e043f4.dll.zip

  • Size

    410KB

  • Sample

    221026-y2bt7aghhp

  • MD5

    73093b4b52a10d6ab2716c33a44a4521

  • SHA1

    987602c5cbd3c4e38718c74580415bf03bb45aa5

  • SHA256

    2077fa13db81c1bad0a16dc803ddb74b91dcedfe634a9c1327ac53cbf0582e78

  • SHA512

    158d1eb05b8645e3875b276a285c9a269240e47c68e7d6fcd4339b0aba4cd88dd738db7e54ad1ae39c984387c0c80a0f5edcf830464ca4d5e88fd0abe9d1636c

  • SSDEEP

    12288:/gjII7XkxgAkjRcsJHcZyMPtinV/PkWNcpD:/gcI7kxgAkjisHcAMAqWNcpD

Score
10/10
qakbotobama2161666689942bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

403.1051

Botnet

obama216

Campaign

1666689942

C2

24.116.45.121:443

24.206.27.39:443

71.199.168.185:443

70.115.104.126:443

190.24.45.24:995

24.9.220.167:443

68.62.199.70:443

43.241.159.238:443

113.162.196.232:443

156.217.60.239:995

197.204.70.167:443

197.202.196.43:443

24.130.228.100:443

41.109.228.108:995

64.123.103.123:443

190.193.180.228:443

24.177.111.153:443

60.54.65.27:443

189.129.38.158:2222

206.1.164.250:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      ee5b6ba63d54fa7a7c3167e125e043f4.dll

    • Size

      728KB

    • MD5

      ee5b6ba63d54fa7a7c3167e125e043f4

    • SHA1

      d540252c07398c4ce616cc3e94ac7fc0b30cf514

    • SHA256

      d563566ddc31541ced93b85ac6e16df102935cb68e28bbe3458aa67d25106885

    • SHA512

      23af5e42814d0372dc23ce457a4216f829eec77e3bbea331334c62e021a32c876418c8d30f19791e291a7577b53327dcf8d25b984da95798a57d67c3b7a5b3d4

    • SSDEEP

      12288:9Zvx07iKfDISZYRobaZ0UrIBfUQ0eIpM4WV6nwldJOCPrHuD5:9ta1DjZBBAgdEM4F6dMCjHu

    Score
    10/10
    qakbotobama2161666689942bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks