Overview

overview

10

Static

static

10

2c90000.dll

windows7-x64

10

2c90000.dll

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c90000.dll

  • Size

    130KB

  • Sample

    230406-vecanaea52

  • MD5

    60e7d8a2f6540f73e1144e7c34036ddc

  • SHA1

    f87182029b54882586123d025fe53d30bae67a27

  • SHA256

    a88b2a11b05afbd43edcbe22435824ec7a6e83a962fc7d08fe1c24c4c3d8dd9b

  • SHA512

    3ae2a571cd7dc4fcc79c48e4ff7fc56ecfbdfc6816f26aaec43c36d55256e3c0ac62249476f8ccceca81800955bdeac7a8252eb3279a9049bb66ff60eccc7ddf

  • SSDEEP

    3072:Y1CGk7wnQpPYn+/lTS15AJJv6VVH68TBff4hzho:YYGkC6QnclaSJJCVVH68TB34d

Score
10/10
qakbotbb221680772777bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

404.909

Botnet

BB22

Campaign

1680772777

C2

83.77.208.166:2222

47.205.25.170:443

12.172.173.82:995

24.236.90.196:2078

75.109.111.89:443

45.50.233.214:443

86.209.8.236:2222

92.154.17.149:2222

59.153.96.4:443

91.82.133.190:443

197.92.131.255:443

103.42.86.42:995

12.172.173.82:21

73.36.196.11:443

77.126.11.114:443

103.140.174.20:2222

12.172.173.82:465

119.82.123.160:443

116.72.250.18:443

109.50.143.218:2222
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      2c90000.dll

    • Size

      130KB

    • MD5

      60e7d8a2f6540f73e1144e7c34036ddc

    • SHA1

      f87182029b54882586123d025fe53d30bae67a27

    • SHA256

      a88b2a11b05afbd43edcbe22435824ec7a6e83a962fc7d08fe1c24c4c3d8dd9b

    • SHA512

      3ae2a571cd7dc4fcc79c48e4ff7fc56ecfbdfc6816f26aaec43c36d55256e3c0ac62249476f8ccceca81800955bdeac7a8252eb3279a9049bb66ff60eccc7ddf

    • SSDEEP

      3072:Y1CGk7wnQpPYn+/lTS15AJJv6VVH68TBff4hzho:YYGkC6QnclaSJJCVVH68TB34d

    Score
    10/10
    qakbotbb221680772777bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks