Overview

overview

10

Static

static

3

12094a47a9...05.dll

windows7-x64

10

12094a47a9...05.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    12094a47a9659b1c2f7c5b36e21d2b0145c9e7b2e79845a437508efa96e5f305.zip

  • Size

    437KB

  • Sample

    240402-mnjr4afg34

  • MD5

    3544b572e91ebb15aa097b1d2622955d

  • SHA1

    0f851499be148ff7f945c583b0f7dc022c6fef46

  • SHA256

    f673f0789fcfa61d30414464b763356e2d65ef07a596ebed4a615cd512557721

  • SHA512

    6220bdfaf385898b85018f86b5306ae2ebaad6d106d737fecfc82a73158366883c479ad6290ec7110e792796599d77b1854d93f2a1861d50cbf07afbff9eef9e

  • SSDEEP

    12288:7+GWGJAvSA64fHbgPWLBqSkuBmr0xxWszL:KGW4Avj7MWlklqr3

Score
10/10
qakbottchk071702975817bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

tchk07

Campaign

1702975817

C2

116.203.56.11:443

109.107.181.8:443
Attributes
  • camp_date

    2023-12-19 08:50:17 +0000 UTC

Targets

    • Target

      12094a47a9659b1c2f7c5b36e21d2b0145c9e7b2e79845a437508efa96e5f305.exe

    • Size

      898KB

    • MD5

      88bbf2a743baaf81f7a312be61f90d76

    • SHA1

      3719aabc29d5eb58d5d2d2a37066047c67bfc2c6

    • SHA256

      12094a47a9659b1c2f7c5b36e21d2b0145c9e7b2e79845a437508efa96e5f305

    • SHA512

      b01f955eb5f840e01f1f65d5f19c0963e155b1f8d03b4e0720eccbd397cc9aee9a19a63000719e3cf8f580573a335bd61f39fe1261f44e1d5371a9c695b60b70

    • SSDEEP

      24576:qTm4c0TXhxdmVQGn88R7XM3Ljluc9KEaJqCjh0LmK8:6jP8Q13LjluSrCj+q/

    Score
    10/10
    qakbottchk071702975817bankerstealertrojan

    • Detect Qakbot Payload

    • Qakbot/Qbot

      Qbot or Qakbot is a sophisticated worm with banking capabilities.

      trojanbankerstealerqakbot
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks