qakbot | d7499e60867309400012a872bd189d4d7ac72025f27915865dec71342ccec394

General

Target

e2268f7ec4be41e4f7a7807ad0cd6767
Size

825KB
Sample

231220-tj9w2sfddr
MD5

e2268f7ec4be41e4f7a7807ad0cd6767
SHA1

db6bf43821b2ef3b1f2ed694ea7dbf5afaa7bdec
SHA256

d7499e60867309400012a872bd189d4d7ac72025f27915865dec71342ccec394
SHA512

dd7d96cbf55545caf87674d6bc2dd74330bcd277992bcaa7361453edd73d8034c78bc72ba6dd9c25980e968257f20f3af37032140814b37b17a290e4fe0f2e39
SSDEEP

24576:vOjCOuBER57hemWxOVCy632yHAMnbOMmpK6kMXn9vM+GGVdrhDXlIF:v4r57hemWxOVCytCrbxmpvX90+XVd9D2

Score

10^/10

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

obama111

Campaign

1633590450

C2

37.210.152.224:995

201.93.111.2:995

202.134.178.157:443

89.101.97.139:443

73.52.50.32:443

188.55.235.110:995

27.223.92.142:995

181.118.183.94:443

136.232.34.70:443

186.32.163.199:443

72.173.78.211:443

76.25.142.196:443

120.150.218.241:995

185.250.148.74:443

89.137.52.44:443

66.103.170.104:2222

188.50.169.158:443

174.54.193.186:443

103.148.120.144:443

140.82.49.12:443

Attributes

salt
jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

- Target
  
  e2268f7ec4be41e4f7a7807ad0cd6767
- Size
  
  825KB
- MD5
  
  e2268f7ec4be41e4f7a7807ad0cd6767
- SHA1
  
  db6bf43821b2ef3b1f2ed694ea7dbf5afaa7bdec
- SHA256
  
  d7499e60867309400012a872bd189d4d7ac72025f27915865dec71342ccec394
- SHA512
  
  dd7d96cbf55545caf87674d6bc2dd74330bcd277992bcaa7361453edd73d8034c78bc72ba6dd9c25980e968257f20f3af37032140814b37b17a290e4fe0f2e39
- SSDEEP
  
  24576:vOjCOuBER57hemWxOVCy632yHAMnbOMmpK6kMXn9vM+GGVdrhDXlIF:v4r57hemWxOVCytCrbxmpvX90+XVd9D2
Score

10^/10

qakbot obama111 1633590450 banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

1

T1053

Persistence

Scheduled Task/Job

1

T1053

Privilege Escalation

Scheduled Task/Job

1

T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Qakbot/Qbot

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2