Overview

overview

10

Static

static

1

Khakis.Bue...ve.dll

windows7-x64

10

Khakis.Bue...ve.dll

windows10-2004-x64

10

Resubmissions

10-04-2023 15:40

230410-s4cavaga3v 3

10-04-2023 15:34

230410-sz9esafh81 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Khakis.BuettneriaceaeUninformative.dll

  • Size

    836KB

  • Sample

    230410-sz9esafh81

  • MD5

    d159cf90d621edaeb48f41fbde1565fb

  • SHA1

    780b8b2ec96ad8aa1263d293edd598c644503bac

  • SHA256

    0f29135d6a4a4548f76484b808b69d73c448914f1bf8a52dc5a024ce26b5d17c

  • SHA512

    be6717bc1236120dd2daaa925601f7f98be40090efada6b5ee1df9d9387e3fafcc1e2a91577e2c0b0825cf47119c8fd1eddd8b8f0142b698919032274f699b91

  • SSDEEP

    24576:8W3jPG1x9YidgLc4wSeWDYnj3cgKUNtu:GNYkbIe4YnrcPUNtu

Score
10/10
qakbotbb231681114726bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

404.909

Botnet

BB23

Campaign

1681114726

C2

184.176.35.223:2222

70.112.206.5:443

81.101.185.146:443

72.134.124.16:443

90.55.106.37:2222

176.202.45.209:443

92.9.45.20:2222

23.30.22.225:50003

79.77.142.22:2222

161.142.103.5:995

23.30.173.133:443

86.45.66.141:2222

119.82.123.160:443

12.172.173.82:20

162.248.14.107:443

116.72.250.18:443

23.30.22.225:443

86.98.23.66:443

103.141.50.79:995

71.31.100.192:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      Khakis.BuettneriaceaeUninformative.dll

    • Size

      836KB

    • MD5

      d159cf90d621edaeb48f41fbde1565fb

    • SHA1

      780b8b2ec96ad8aa1263d293edd598c644503bac

    • SHA256

      0f29135d6a4a4548f76484b808b69d73c448914f1bf8a52dc5a024ce26b5d17c

    • SHA512

      be6717bc1236120dd2daaa925601f7f98be40090efada6b5ee1df9d9387e3fafcc1e2a91577e2c0b0825cf47119c8fd1eddd8b8f0142b698919032274f699b91

    • SSDEEP

      24576:8W3jPG1x9YidgLc4wSeWDYnj3cgKUNtu:GNYkbIe4YnrcPUNtu

    Score
    10/10
    qakbotbb231681114726bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks