Overview

overview

10

Static

static

50673ab3d6...47.dll

windows7-x64

10

50673ab3d6...47.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    50673ab3d69a6a4cb476fe103672904d034ac00780f674a23c75cc4bd1736147

  • Size

    250KB

  • Sample

    221216-tex2pafa36

  • MD5

    69bac166f6d95701d36c280e71571c66

  • SHA1

    e9f32d519eedca00557b4c03dfbbf16459eff781

  • SHA256

    e93915d818b5452a377bf491883d87b2c8bf79699608aa4f2d6bbe80e2c579d2

  • SHA512

    ed2721487eaee079835338c1e3746a1119b91f00725deeb0c0f1462e14a324a3db58c88b0be0b4b94939c00fcff446a9e9d67a165d8a2c0ecfdaf85f1297c240

  • SSDEEP

    6144:2ElL+v1JK2C3J+Ig9E66Qq2elk+93zTno3pMPpUegkFNMD:dmJK2ksIFOUhz0MpVFNMD

Score
10/10
qakbotbb1663148750bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

403.862

Botnet

BB

Campaign

1663148750

C2

193.3.19.37:443

99.232.140.205:2222

99.253.251.74:443

197.94.210.133:443

37.210.148.30:995

14.161.194.86:443

154.181.203.230:995

200.161.62.126:32101

134.35.10.122:443

64.207.215.69:443

81.131.161.131:2078

217.165.85.223:993

78.100.225.34:2222

85.114.110.108:443

102.38.96.108:995

123.240.131.1:443

109.158.159.179:993

186.105.182.127:443

190.44.40.48:995

88.233.194.154:2222
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      50673ab3d69a6a4cb476fe103672904d034ac00780f674a23c75cc4bd1736147

    • Size

      441KB

    • MD5

      92a0a65edfa69e2764d30d46adb5e4e1

    • SHA1

      4ecba4e691ff85136502aabbce41275a498a924e

    • SHA256

      50673ab3d69a6a4cb476fe103672904d034ac00780f674a23c75cc4bd1736147

    • SHA512

      899dd9f439ee5b35d703ffe748e2facf84505128a6148490a685213f8a987a981d380d7a2e4de188bb3e5aa7f420b1e47fde0dd1620193eb996c3815a529a68c

    • SSDEEP

      6144:36N5XNlCfcqFhOdpwNzM2a3gfwp3NkOWuzv/24bktfTGoH:KrducqxNzbaP3WOWuLTCfThH

    Score
    10/10
    qakbotbb1663148750bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks