Overview

overview

10

Static

static

bridgeable.dat.dll

windows7-x64

10

bridgeable.dat.dll

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bridgeable.dat.dll

  • Size

    386KB

  • Sample

    221027-vpdw8sdabk

  • MD5

    d92fe35ba1c68a744f5f73e40469390a

  • SHA1

    239d27c0d12c03db8a73698f027bd8568f4187fc

  • SHA256

    80d77dbf3cdb42950f98bdff1622cd0603e35d70ab4e68c791ff1de2eabb1605

  • SHA512

    50defda468fa0cbc8126bc622489829832ec2ca936d8e8ef6e5b9049aa0528bacc9d5c71f09838a13683fadc80cb050c22cc91dc9dab7dba373551f4d96c84de

  • SSDEEP

    6144:XtgTFlqteWTBa5WsoUReNsyLK9hH8WqniKS9jyA9yjHHXsBcfmL/p+LIORL6qYFp:d8z4TU5WsoURzN9hctniPHlQEFYM

Score
10/10
qakbotobama2101665041236bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

403.914

Botnet

obama210

Campaign

1665041236

C2

41.104.205.128:443

134.35.6.76:443

197.202.163.4:443

181.164.194.228:443

105.159.124.224:443

197.158.89.85:443

41.96.33.236:443

181.141.3.126:443

123.22.7.132:443

163.182.177.80:443

41.248.72.229:8443

41.100.62.129:443

68.83.169.91:443

190.29.228.61:443

160.176.249.11:995

41.107.54.99:443

94.52.127.44:443

105.69.155.85:995

45.227.251.167:2222

197.206.141.97:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      bridgeable.dat.dll

    • Size

      386KB

    • MD5

      d92fe35ba1c68a744f5f73e40469390a

    • SHA1

      239d27c0d12c03db8a73698f027bd8568f4187fc

    • SHA256

      80d77dbf3cdb42950f98bdff1622cd0603e35d70ab4e68c791ff1de2eabb1605

    • SHA512

      50defda468fa0cbc8126bc622489829832ec2ca936d8e8ef6e5b9049aa0528bacc9d5c71f09838a13683fadc80cb050c22cc91dc9dab7dba373551f4d96c84de

    • SSDEEP

      6144:XtgTFlqteWTBa5WsoUReNsyLK9hH8WqniKS9jyA9yjHHXsBcfmL/p+LIORL6qYFp:d8z4TU5WsoURzN9hctniPHlQEFYM

    Score
    10/10
    qakbotobama2101665041236bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks