Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

ccc80c7306...72.dll

windows7-x64

10

ccc80c7306...72.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8569475146.zip

  • Size

    354KB

  • Sample

    221219-whwn5saf9z

  • MD5

    8c0d6f0ab3b1ebbb8603f5941291956c

  • SHA1

    149ed7d6b3338b678008bb49b7e1c7f6e93a4b8a

  • SHA256

    5210ddc4a86cbdaf74d1c3c4e1ec16855cb7a8bd9afb3894932e31eafbfb1062

  • SHA512

    07e5b68fba6a0d1bfb28ee55fc7ee032cbc422fbeb96d037e1a2521642ebea2bb7db1e35d1a87c3d84c62be0406c9fc752702eb94852ff794483066cb87a7e8c

  • SSDEEP

    6144:ga4to6ix41CSFhwQU61Ap0kp1N+L0eiBUIF6FO7pXjujZ7qu:g1mO1CqhwI8N+L0lXRjujdqu

Score
10/10
qakbotobama2071664363417bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

403.895

Botnet

obama207

Campaign

1664363417

C2

217.165.146.158:993

41.97.179.58:443

86.132.13.49:2078

197.203.50.195:443

85.245.143.94:443

86.196.181.62:2222

102.190.190.242:995

105.184.133.198:995

179.111.23.186:32101

179.251.119.206:995

84.3.85.30:443

39.44.5.104:995

197.41.235.69:995

193.3.19.137:443

186.81.122.168:443

103.173.121.17:443

41.104.80.233:443

102.189.184.12:995

156.199.90.139:443

14.168.180.223:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      ccc80c73061729902431bf2fb0238df8f2a2da34b1d1bb7497e27c089c215272

    • Size

      695KB

    • MD5

      ef0b0131dd0bc88c113b17f9049e8fb3

    • SHA1

      8269f5fafb9d88d15a821d9311c8659148f854f7

    • SHA256

      ccc80c73061729902431bf2fb0238df8f2a2da34b1d1bb7497e27c089c215272

    • SHA512

      a06e89f706f7c0712146102424d94fa254282b8b49563f896d55dfa324610e5492bb6ba061e774ccb7983d269e315ee52e8c2344a5ff0fb0cfe4094ebfe524fd

    • SSDEEP

      12288:nieL1vc1PdFjpmw5qS6xnGWnE/N285UT+QD1lNMA:i81IFnqnnEl5w9M

    Score
    10/10
    qakbotobama2071664363417bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks