Overview

overview

10

Static

static

3

799b7a01e7...81.dll

windows7-x64

10

799b7a01e7...81.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    799b7a01e7941fa8baf90b3bc4c6397ca2974429b835949540b0b88162f4fc81.zip

  • Size

    342KB

  • Sample

    240402-l5ec9see59

  • MD5

    2e433dd39a686a25e5717794ace4d1a7

  • SHA1

    af6849f2d394bea68232fa81d5c9140aabc3043a

  • SHA256

    9cec2535755541a9d34d4e2715423cb39b12bd0ec8b401d784c1c706f18281b5

  • SHA512

    031c3dcb261fa8fcf444303cf4183cad58022b63847bfb91847d2dcad58a6cee9bc846ffa4fa50e578df00102e290a2560e67bbea74e2e29a3adef520c459a30

  • SSDEEP

    6144:6BCbJeVMqV+uvFqHNLC2q6EKofShO16bniJh50z8+Qk+aqVV+P9HI/HkQNQjkQ:5bJAbwu9qHdCcGD1v35qqVIxI/CkQ

Score
10/10
qakbotobama2071664363417bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

403.895

Botnet

obama207

Campaign

1664363417

C2

217.165.146.158:993

41.97.179.58:443

86.132.13.49:2078

197.203.50.195:443

85.245.143.94:443

86.196.181.62:2222

102.190.190.242:995

105.184.133.198:995

179.111.23.186:32101

179.251.119.206:995

84.3.85.30:443

39.44.5.104:995

197.41.235.69:995

193.3.19.137:443

186.81.122.168:443

103.173.121.17:443

41.104.80.233:443

102.189.184.12:995

156.199.90.139:443

14.168.180.223:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      799b7a01e7941fa8baf90b3bc4c6397ca2974429b835949540b0b88162f4fc81.dll

    • Size

      695KB

    • MD5

      7f848e8045da39b62f447cfefcfbc4d0

    • SHA1

      19434176868e295ae703d60e61751d9f755831bd

    • SHA256

      799b7a01e7941fa8baf90b3bc4c6397ca2974429b835949540b0b88162f4fc81

    • SHA512

      a98f36849b10d34a67dddb6e604385ddb8759cbe31027a5da4d53267289b0e43cc53f05b2e54ec4309bbd2dcb7ba86ef0fa1cde2bb5dc23ebd61db10cb96c6a8

    • SSDEEP

      12288:nieL1vc1PdFjpmw5qS6xnGWPE/N285UT+QD1lNMA:i81IFnqnPEl5w9M

    Score
    10/10
    qakbotobama2071664363417bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks