Overview

overview

10

Static

static

10

d04caa7719...f7.dll

windows7-x64

10

d04caa7719...f7.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ca7ff9ea5d5518479d8a2d5e06f3b0e.bin

  • Size

    80KB

  • Sample

    230130-w9ws8adb4z

  • MD5

    011b0ba1e0b98997a0d8ae516f2520a6

  • SHA1

    9f2cddb623a6047dc852deae7e3ac4ce06aed320

  • SHA256

    3b75ee0674b078689f9acabcb4ad3d53271f8dd8d743162b77eeb14b6c7b5caf

  • SHA512

    b48a8b86f18b4421971b2ead17834a81fda08124ab8c983f24003b16a345fb27398853df31b14d88bfdf946289df16d75458116bf843a8e5a3033f9c93b266e9

  • SSDEEP

    1536:taMYMEs1Lks34aZihdmTAlfu2gZKpJA/W+ag+lGyJJgY8pTswz6Uk:cz2LkEnZihITOuBeJA/WRrJgYOAL

Score
10/10
qakbotobama1941656313665bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

403.780

Botnet

obama194

Campaign

1656313665

C2

70.46.220.114:443

32.221.224.140:995

67.209.195.198:443

186.90.153.162:2222

148.64.96.100:443

67.165.206.193:993

86.200.151.188:2222

80.11.74.81:2222

173.174.216.62:443

45.241.173.232:993

41.228.22.180:443

1.161.81.21:995

24.178.196.158:2222

37.34.253.233:443

93.48.80.198:995

129.208.158.180:995

120.150.218.241:995

38.70.253.226:2222

111.125.245.116:995

47.23.89.60:993
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      d04caa7719610bd0aa0dd1cda75fe73365479b059968b75cf3a9e3fd41ad5ef7.dll

    • Size

      126KB

    • MD5

      4ca7ff9ea5d5518479d8a2d5e06f3b0e

    • SHA1

      d83d333893962698edb9a5a963312cf40815d406

    • SHA256

      d04caa7719610bd0aa0dd1cda75fe73365479b059968b75cf3a9e3fd41ad5ef7

    • SHA512

      a6926050b57561026546f077b935d694dd0d591ba953b70549c6439fe233c6aa769306a3efa339ad190c052987e719090703cd8527ed7a0f702392110efac875

    • SSDEEP

      3072:rV9GWm/WPuPuZji5rPSASJDgfMBTBfQIXMh:Rm/WGPuZj83SJEfMBTBoI+

    Score
    10/10
    qakbotobama1941656313665bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks