Overview

overview

10

Static

static

10

third_carved_dll.dll

windows7-x64

10

third_carved_dll.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    third_carved_dll.bin

  • Size

    166KB

  • Sample

    240326-182qasgh31

  • MD5

    07dfe6aed5e353c8d4cc0ab026c63e3e

  • SHA1

    29fe5ec300aa7e3b5124a223eafaa0c7df39db56

  • SHA256

    110423a9555f7aba13483288abdb3badc6194dc01f825bfe1be174d506625efb

  • SHA512

    7d165bc271fde6a07d65400f4175eaa12710bb4219cb24085b67cfa7559352df9d7dd08814a42f2b17d1b888e7b43093a8d6ad630eb0eb6bfe97014a6ef0bb8a

  • SSDEEP

    3072:9ixYRIgVFK9cJx2I87ZMGCDaZqZu9E/gVAE/dxwtJBdw:9ixYVVQ9G2I8ZMGjZqY9EcAWUB6

Score
10/10
qakbottchk061702463600bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

tchk06

Campaign

1702463600

C2

45.138.74.191:443

65.108.218.24:443
Attributes
  • camp_date

    2023-12-13 10:33:20 +0000 UTC

Targets

    • Target

      third_carved_dll.bin

    • Size

      166KB

    • MD5

      07dfe6aed5e353c8d4cc0ab026c63e3e

    • SHA1

      29fe5ec300aa7e3b5124a223eafaa0c7df39db56

    • SHA256

      110423a9555f7aba13483288abdb3badc6194dc01f825bfe1be174d506625efb

    • SHA512

      7d165bc271fde6a07d65400f4175eaa12710bb4219cb24085b67cfa7559352df9d7dd08814a42f2b17d1b888e7b43093a8d6ad630eb0eb6bfe97014a6ef0bb8a

    • SSDEEP

      3072:9ixYRIgVFK9cJx2I87ZMGCDaZqZu9E/gVAE/dxwtJBdw:9ixYVVQ9G2I8ZMGjZqY9EcAWUB6

    Score
    10/10
    qakbottchk061702463600bankerstealertrojan

    • Detect Qakbot Payload

    • Qakbot/Qbot

      Qbot or Qakbot is a sophisticated worm with banking capabilities.

      trojanbankerstealerqakbot
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks