qakbot | 307dcd0bd76ec40e3297813e65542bc6480262578d6623825340a5add4fb6bf8

General

Target

307dcd0bd76ec40e3297813e65542bc6480262578d6623825340a5add4fb6bf8
Size

949KB
Sample

221130-tlg9tahc5w
MD5

a8e2e77d6e1159face67ee36e5d4f199
SHA1

e3494981cfbc8c9a2c7a053c3ca4ab662b7f529c
SHA256

307dcd0bd76ec40e3297813e65542bc6480262578d6623825340a5add4fb6bf8
SHA512

c5e1f248a90e3406e690b1a7c3f6e09f4c1b3db5be40786669ba3aa1d48f0e6f2b0060dc3ee098fb76dfb59f2aec14aac5300556c69e214eef542561bc7df273
SSDEEP

24576:sxvBJCYfTVuEw7wJarOIq0PqJtp050Yjpov:solEJtWyYqv

Score

10^/10

qakbot tr 1613385567 banker stealer trojan

Malware Config

Extracted

Family

qakbot

Version

401.138

Botnet

tr

Campaign

1613385567

C2

78.63.226.32:443

197.51.82.72:443

193.248.221.184:2222

95.77.223.148:443

71.199.192.62:443

77.211.30.202:995

80.227.5.69:443

77.27.204.204:995

81.97.154.100:443

173.184.119.153:995

38.92.225.121:443

81.150.181.168:2222

90.65.236.181:2222

83.110.103.152:443

73.153.211.227:443

188.25.63.105:443

89.137.211.239:995

202.188.138.162:443

98.173.34.212:995

87.202.87.210:2222

Attributes

salt
jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

- Target
  
  307dcd0bd76ec40e3297813e65542bc6480262578d6623825340a5add4fb6bf8
- Size
  
  949KB
- MD5
  
  a8e2e77d6e1159face67ee36e5d4f199
- SHA1
  
  e3494981cfbc8c9a2c7a053c3ca4ab662b7f529c
- SHA256
  
  307dcd0bd76ec40e3297813e65542bc6480262578d6623825340a5add4fb6bf8
- SHA512
  
  c5e1f248a90e3406e690b1a7c3f6e09f4c1b3db5be40786669ba3aa1d48f0e6f2b0060dc3ee098fb76dfb59f2aec14aac5300556c69e214eef542561bc7df273
- SSDEEP
  
  24576:sxvBJCYfTVuEw7wJarOIq0PqJtp050Yjpov:solEJtWyYqv
Score

10^/10

qakbot tr 1613385567 banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1

T1053

Persistence

Scheduled Task

1

T1053

Privilege Escalation

Scheduled Task

1

T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Qakbot/Qbot

Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v6

Tasks

static1

behavioral1

behavioral2