Overview

overview

10

Static

static

sarcasms.dll

windows7-x64

10

sarcasms.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    sarcasms.tmp

  • Size

    624KB

  • Sample

    221115-wtp1qsfb72

  • MD5

    5efa4adf4503c15dfa5ff82be122d193

  • SHA1

    bf28ddf06cac84f734c8d74f2f626694bec11379

  • SHA256

    9dc43a0579b5c380f0709b6ba7683e3ff4ad9b65f7597bb0b93916b626bc1587

  • SHA512

    3ed14d639ad77ce5ec1eb295d796f2d9235eda4a9d30d1c819ee230abcdb5fea539e36233a427fa13bdf498f3fb0c8b418c0f2716aea532249fa372f057d441b

  • SSDEEP

    12288:i/TGcg+w9KClJdcvXumiT3QOrT8Rk0zvInbiPCw18al1USuSZxHHTkG/8H:i/TGckKCl30IAIQR3O7OjHHAp

Score
10/10
qakbotbb061668492308bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

404.27

Botnet

BB06

Campaign

1668492308

C2

49.175.72.56:443

81.229.117.95:2222

47.41.154.250:443

69.133.162.35:443

84.35.26.14:995

68.47.128.161:443

156.217.219.147:995

87.65.160.87:995

174.101.111.4:443

82.127.174.33:2222

91.169.12.198:32100

24.28.121.122:443

157.231.42.190:995

90.89.95.158:2222

74.33.84.227:443

24.64.114.59:2222

80.13.179.151:2222

64.207.237.118:443

24.206.27.39:443

170.253.25.35:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      sarcasms.tmp

    • Size

      624KB

    • MD5

      5efa4adf4503c15dfa5ff82be122d193

    • SHA1

      bf28ddf06cac84f734c8d74f2f626694bec11379

    • SHA256

      9dc43a0579b5c380f0709b6ba7683e3ff4ad9b65f7597bb0b93916b626bc1587

    • SHA512

      3ed14d639ad77ce5ec1eb295d796f2d9235eda4a9d30d1c819ee230abcdb5fea539e36233a427fa13bdf498f3fb0c8b418c0f2716aea532249fa372f057d441b

    • SSDEEP

      12288:i/TGcg+w9KClJdcvXumiT3QOrT8Rk0zvInbiPCw18al1USuSZxHHTkG/8H:i/TGckKCl30IAIQR3O7OjHHAp

    Score
    10/10
    qakbotbb061668492308bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks