qakbot | 1e76b010505c5831c2153bed026f79467984c1c633bb8ef3f3788fc7a26f24e4

General

Target

62a41c2d1cec79061e66ae0394e82205
Size

825KB
Sample

231219-vec7ysbea6
MD5

62a41c2d1cec79061e66ae0394e82205
SHA1

20e3187e1e6f57eb9c71ac1ca791cccc83f2b503
SHA256

1e76b010505c5831c2153bed026f79467984c1c633bb8ef3f3788fc7a26f24e4
SHA512

67ebd32f13a151744f999686ad4b9b0c6b48165ae7b4776a391e26615977092a9024b22795a019dbfaf188d585a1792ee49d242073124e1e51f08e28b1773897
SSDEEP

24576:YsjCOuBER57hemWxOVCy632yHAMnbOMmpK6kMXL9vM+GGVdrhD/lIF:Yyr57hemWxOVCytCrbxmpvXB0+XVd9DO

Score

10^/10

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

obama111

Campaign

1633590450

C2

37.210.152.224:995

201.93.111.2:995

202.134.178.157:443

89.101.97.139:443

73.52.50.32:443

188.55.235.110:995

27.223.92.142:995

181.118.183.94:443

136.232.34.70:443

186.32.163.199:443

72.173.78.211:443

76.25.142.196:443

120.150.218.241:995

185.250.148.74:443

89.137.52.44:443

66.103.170.104:2222

188.50.169.158:443

174.54.193.186:443

103.148.120.144:443

140.82.49.12:443

Attributes

salt
jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

- Target
  
  62a41c2d1cec79061e66ae0394e82205
- Size
  
  825KB
- MD5
  
  62a41c2d1cec79061e66ae0394e82205
- SHA1
  
  20e3187e1e6f57eb9c71ac1ca791cccc83f2b503
- SHA256
  
  1e76b010505c5831c2153bed026f79467984c1c633bb8ef3f3788fc7a26f24e4
- SHA512
  
  67ebd32f13a151744f999686ad4b9b0c6b48165ae7b4776a391e26615977092a9024b22795a019dbfaf188d585a1792ee49d242073124e1e51f08e28b1773897
- SSDEEP
  
  24576:YsjCOuBER57hemWxOVCy632yHAMnbOMmpK6kMXL9vM+GGVdrhD/lIF:Yyr57hemWxOVCytCrbxmpvXB0+XVd9DO
Score

10^/10

qakbot obama111 1633590450 banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

1

T1053

Persistence

Scheduled Task/Job

1

T1053

Privilege Escalation

Scheduled Task/Job

1

T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Qakbot/Qbot

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2