Overview

overview

10

Static

static

3

f4bb0089dc...d2.exe

windows7-x64

10

f4bb0089dc...d2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f4bb0089dcf3629b1570fda839ef2f06c29cbf846c5134755d22d419015c8bd2.zip

  • Size

    2.2MB

  • Sample

    240402-qvw8jsbh33

  • MD5

    08b552d62734cc2801c0c9b460898d66

  • SHA1

    8d6e231f734edf6247d05f820b0901a776805684

  • SHA256

    1cabd00e7dfb01e346b6d4478c5dfbcda2da1ffd3526baf91c1f4dc28f7d63b3

  • SHA512

    6a5a664a0686f3dad9f4b0287d6c32ee96da5adf0bcc63e0b0c892171ff1e5c2a765be536cad31995ef739adf8a47f5f1cb0ac426b42d4d5f59b9711812fbb90

  • SSDEEP

    24576:aW29QYxSQt4Zstog3tsFMYDQY+lM3XkJO34Dljq/zJaTUmEG7OR3PYSxtmpwo2jl:zPgt4Wx3TQ3AljaVGPO3mP21dERg5YS

Score
10/10
qakbotbmw021706788306bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

bmw02

Campaign

1706788306

C2

62.204.41.234:2222

31.210.173.10:443

185.113.8.123:443
Attributes
  • camp_date

    2024-02-01 11:51:46 +0000 UTC

Targets

    • Target

      f4bb0089dcf3629b1570fda839ef2f06c29cbf846c5134755d22d419015c8bd2.exe

    • Size

      4.2MB

    • MD5

      6655347cd176e076ac8c8e509841f1fb

    • SHA1

      2bf60b4709e1e653ad5427761ba70c7b6c22b8ba

    • SHA256

      f4bb0089dcf3629b1570fda839ef2f06c29cbf846c5134755d22d419015c8bd2

    • SHA512

      ca18ce0c69062b42d1fe4b1c563b64b3cc55eb8601a6caef4eb9a246442b152b553df08e7d6cbb200cdf6095205dd8d8c5db8d3923cfe4cdce8e109efab17d5a

    • SSDEEP

      98304:YdPQzF3R/e/hh6FZFLOAkGkzdnEVomFHKnP:YA3AYFZFLOyomFHKnP

    Score
    10/10
    qakbotbmw021706788306bankerstealertrojan

    • Detect Qakbot Payload

    • Qakbot/Qbot

      Qbot or Qakbot is a sophisticated worm with banking capabilities.

      trojanbankerstealerqakbot
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks