Overview

overview

10

Static

static

rebuttal.dll

windows7-x64

10

rebuttal.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    rebuttal.tmp

  • Size

    624KB

  • Sample

    221115-27dshsgd62

  • MD5

    8a601be19aac2e90e90d071a15b6d836

  • SHA1

    3b62c0d30112e2130a1d4cd36cff5a6711b0c5d4

  • SHA256

    3d1a646625cfa6ea32a9c50a164a171edfcb9da29da1d9bcca124c563d22399e

  • SHA512

    b0f7e66e612f9c6e101d02a901e6417817906addeb70d1fe945cb86ae9649c20ed6a2d3b8cb0dc0ecb34b8c86e6df9b6bb1f27e81c0b05a51761419b454fb46a

  • SSDEEP

    12288:i/TGcg+w9KCZJdcvXumiT3QOrT8Rk0zvInbiPCw18al1USuSZxHHTkG/8H:i/TGckKCZ30IAIQR3O7OjHHAp

Score
10/10
qakbotbb061668492308bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

404.27

Botnet

BB06

Campaign

1668492308

C2

49.175.72.56:443

81.229.117.95:2222

47.41.154.250:443

69.133.162.35:443

84.35.26.14:995

68.47.128.161:443

156.217.219.147:995

87.65.160.87:995

174.101.111.4:443

82.127.174.33:2222

91.169.12.198:32100

24.28.121.122:443

157.231.42.190:995

90.89.95.158:2222

74.33.84.227:443

24.64.114.59:2222

80.13.179.151:2222

64.207.237.118:443

24.206.27.39:443

170.253.25.35:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      rebuttal.tmp

    • Size

      624KB

    • MD5

      8a601be19aac2e90e90d071a15b6d836

    • SHA1

      3b62c0d30112e2130a1d4cd36cff5a6711b0c5d4

    • SHA256

      3d1a646625cfa6ea32a9c50a164a171edfcb9da29da1d9bcca124c563d22399e

    • SHA512

      b0f7e66e612f9c6e101d02a901e6417817906addeb70d1fe945cb86ae9649c20ed6a2d3b8cb0dc0ecb34b8c86e6df9b6bb1f27e81c0b05a51761419b454fb46a

    • SSDEEP

      12288:i/TGcg+w9KCZJdcvXumiT3QOrT8Rk0zvInbiPCw18al1USuSZxHHTkG/8H:i/TGckKCZ30IAIQR3O7OjHHAp

    Score
    10/10
    qakbotbb061668492308bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks