qakbot | 34e4c5e56024313a23dc1e6df0e742559e378dfe3c47e20cb1d2f739b71ab96d

General

Target

2df42d2e20e3d91a380fe98845d02b10_JaffaCakes118
Size

836KB
Sample

240329-1zty4abg42
MD5

2df42d2e20e3d91a380fe98845d02b10
SHA1

7556ad1a1319921a06dfafd44e40b5e851b4a578
SHA256

34e4c5e56024313a23dc1e6df0e742559e378dfe3c47e20cb1d2f739b71ab96d
SHA512

e268cf4d6db9323041677e76ab6d4f6a4ae84ccef289eaa2e407cddb22c5be69ab33dc865d7bc33ca8b2b3bcf13376dc15c8f523c519f5673904075002bba01f
SSDEEP

24576:IL8cabX4zXsvdilerHJI6NIH1E2C4Nl4Z:cybX4XslKCBIH1E2C4

Score

10^/10

qakbot tr 1633943125 banker stealer trojan

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

tr

Campaign

1633943125

C2

140.82.49.12:443

89.137.52.44:443

24.107.165.50:443

66.216.193.114:443

75.131.217.182:443

41.86.42.158:995

24.119.214.7:443

67.166.233.75:443

105.198.236.99:443

120.151.47.189:443

2.222.167.138:443

41.228.22.180:443

78.105.213.151:995

5.193.125.67:995

41.86.42.158:443

96.57.188.174:2078

120.150.218.241:995

66.177.215.152:0

122.11.220.212:2222

73.52.50.32:443

Attributes

salt
jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

- Target
  
  2df42d2e20e3d91a380fe98845d02b10_JaffaCakes118
- Size
  
  836KB
- MD5
  
  2df42d2e20e3d91a380fe98845d02b10
- SHA1
  
  7556ad1a1319921a06dfafd44e40b5e851b4a578
- SHA256
  
  34e4c5e56024313a23dc1e6df0e742559e378dfe3c47e20cb1d2f739b71ab96d
- SHA512
  
  e268cf4d6db9323041677e76ab6d4f6a4ae84ccef289eaa2e407cddb22c5be69ab33dc865d7bc33ca8b2b3bcf13376dc15c8f523c519f5673904075002bba01f
- SSDEEP
  
  24576:IL8cabX4zXsvdilerHJI6NIH1E2C4Nl4Z:cybX4XslKCBIH1E2C4
Score

10^/10

qakbot tr 1633943125 banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

1

T1053

Persistence

Scheduled Task/Job

1

T1053

Privilege Escalation

Scheduled Task/Job

1

T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Qakbot/Qbot

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2