Overview

overview

10

Static

static

3

c15df67c11...73.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c15df67c119c2cfc7845a01f8a36f2b85612660b5464464c5be6370f9afaa173

  • Size

    293KB

  • Sample

    240201-yprd4sfehn

  • MD5

    52597bf4473f6f446102ea205f140321

  • SHA1

    a7aa49955cd61157b29b1c61e194c814a90e6e14

  • SHA256

    c15df67c119c2cfc7845a01f8a36f2b85612660b5464464c5be6370f9afaa173

  • SHA512

    d88ce6df59c8c5bfa97cd9707636ec22bd95a58403694238b50192d74c83ba8de72d1cb032d3ba93c06cd235a824e63e1ef69ad41d9af6e3252dffeea5b0724b

  • SSDEEP

    3072:025H3LUTyMW0L52JD6Z/7sg+9s07pxexALWmxhinnYfhRzl+K39bjXwHK7:02EV+ex7sg+JdxeK3zina9tbUHk

Score
10/10
qakbottr1623837834bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.115

Botnet

tr

Campaign

1623837834

C2

144.139.47.206:443

105.198.236.101:443

136.232.34.70:443

90.65.234.26:2222

71.41.184.10:3389

98.192.185.86:443

184.185.103.157:443

24.179.77.236:443

81.97.154.100:443

186.144.33.73:443

96.253.46.210:443

213.122.113.120:443

47.22.148.6:443

149.28.99.97:995

45.63.107.192:2222

45.32.211.207:443

45.32.211.207:8443

149.28.98.196:995

45.63.107.192:995

45.77.115.208:443
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      c15df67c119c2cfc7845a01f8a36f2b85612660b5464464c5be6370f9afaa173

    • Size

      293KB

    • MD5

      52597bf4473f6f446102ea205f140321

    • SHA1

      a7aa49955cd61157b29b1c61e194c814a90e6e14

    • SHA256

      c15df67c119c2cfc7845a01f8a36f2b85612660b5464464c5be6370f9afaa173

    • SHA512

      d88ce6df59c8c5bfa97cd9707636ec22bd95a58403694238b50192d74c83ba8de72d1cb032d3ba93c06cd235a824e63e1ef69ad41d9af6e3252dffeea5b0724b

    • SSDEEP

      3072:025H3LUTyMW0L52JD6Z/7sg+9s07pxexALWmxhinnYfhRzl+K39bjXwHK7:02EV+ex7sg+JdxeK3zina9tbUHk

    Score
    10/10
    qakbottr1623837834bankerstealertrojan
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks