qakbot | ca742816e3d8a07bf4d3065ff0061ca18ad8306420f54c84bc602b56207b4c7e

General

Target

bd7288f617f547ee161f93c54cceb987
Size

825KB
Sample

231220-q58pbsefa6
MD5

bd7288f617f547ee161f93c54cceb987
SHA1

cb65f983272846d88ee965f0cb3a1edf6a132d52
SHA256

ca742816e3d8a07bf4d3065ff0061ca18ad8306420f54c84bc602b56207b4c7e
SHA512

8989956505d39ca59b9f4a8520ff264708c17c23b4f3e001ab602d834d7d6e0a98e6352d65c57fe42b2d9e9ce57e6ff13ab2dbd33a72f1af65156a346ef9bf15
SSDEEP

24576:bbjCOuBER57hemWxOVCy632yHAMnbOMmpK6kMXL9vM+GGVdrhDblIF:bPr57hemWxOVCytCrbxmpvXB0+XVd9DS

Score

10^/10

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

obama111

Campaign

1633590450

C2

37.210.152.224:995

201.93.111.2:995

202.134.178.157:443

89.101.97.139:443

73.52.50.32:443

188.55.235.110:995

27.223.92.142:995

181.118.183.94:443

136.232.34.70:443

186.32.163.199:443

72.173.78.211:443

76.25.142.196:443

120.150.218.241:995

185.250.148.74:443

89.137.52.44:443

66.103.170.104:2222

188.50.169.158:443

174.54.193.186:443

103.148.120.144:443

140.82.49.12:443

Attributes

salt
jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

- Target
  
  bd7288f617f547ee161f93c54cceb987
- Size
  
  825KB
- MD5
  
  bd7288f617f547ee161f93c54cceb987
- SHA1
  
  cb65f983272846d88ee965f0cb3a1edf6a132d52
- SHA256
  
  ca742816e3d8a07bf4d3065ff0061ca18ad8306420f54c84bc602b56207b4c7e
- SHA512
  
  8989956505d39ca59b9f4a8520ff264708c17c23b4f3e001ab602d834d7d6e0a98e6352d65c57fe42b2d9e9ce57e6ff13ab2dbd33a72f1af65156a346ef9bf15
- SSDEEP
  
  24576:bbjCOuBER57hemWxOVCy632yHAMnbOMmpK6kMXL9vM+GGVdrhDblIF:bPr57hemWxOVCytCrbxmpvXB0+XVd9DS
Score

10^/10

qakbot obama111 1633590450 banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

1

T1053

Persistence

Scheduled Task/Job

1

T1053

Privilege Escalation

Scheduled Task/Job

1

T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Qakbot/Qbot

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2