Overview

overview

10

Static

static

10

Qak_02CF0000.dll

windows7-x64

10

Qak_02CF0000.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Qak_02CF0000.7z

  • Size

    70KB

  • Sample

    230825-cbgrvsge78

  • MD5

    48352eb8d435647c653d104d195ada3e

  • SHA1

    7d82f8242a7317e7bc01244a43ce46288f4e2941

  • SHA256

    3f004293165057ac40d7d2dc663cc62c877ebe29601251dcca24b6aa1062b7af

  • SHA512

    c8ace6774c7e05823a4d87d547090b14333b6f031927348ba771989b5e9d9c524c3e4d6c3706b5f2d4535136956ad0cfe84d4de85adb386c7af4e78ddd76112e

  • SSDEEP

    1536:U6yAAVMwQzPOPBbhDIi9efm6RbP1444aQl/6GZByb/:U6zFwQzPuhDI++m6Rj144bQl/6GTyb/

Score
10/10
qakbotobama1501640256791bankerevasionstealertrojan

Malware Config

Extracted

Family

qakbot

Version

403.10

Botnet

obama150

Campaign

1640256791

C2

96.21.251.127:2222

70.51.134.181:2222

69.14.172.24:443

186.64.87.213:443

94.62.161.77:995

103.139.242.30:990

114.79.148.170:443

217.164.247.241:2222

178.153.86.181:443

136.232.34.70:443

37.210.226.125:61202

173.21.10.71:2222

31.219.154.176:32101

140.82.49.12:443

32.221.229.7:443

24.152.219.253:995

106.51.48.170:50001

114.38.161.124:995

96.37.113.36:993

190.39.205.165:443
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      Qak_02CF0000.bin

    • Size

      124KB

    • MD5

      1732464a22a6d4d656b12500de0d9494

    • SHA1

      477f2b33ff38b3806a80fb1133eec32d1d264c55

    • SHA256

      8cb602444ed6e9f554ca05c916839957b88a6abc9b6e67958bae6a7740f01bf4

    • SHA512

      861d5e0129e637ba60a7fba759c0052cf4b4f6392307557cd0b46ab5fc49350bf519b17f117a703fca161a2bb6de3dd8a9873cdb63ed20599f461942894d9027

    • SSDEEP

      3072:z6gdJqokMqk/cfhlbMQTrJhVE/2fTBfAhV7g6Z:ugjqor/cfh2Q/J4/2fTBYYK

    Score
    10/10
    qakbotobama1501640256791bankerevasionstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks