Overview

overview

10

Static

static

3

12094a47a9...05.dll

windows7-x64

10

12094a47a9...05.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c704a8a3b1263e92f07c9d215574789d1ffee30e63244cad63f060b752cfc6e

  • Size

    437KB

  • Sample

    240417-qcpqragf46

  • MD5

    4ff232e22c56ef8c1287b3a3fb29c691

  • SHA1

    d7802e8db12df4578e7691bf4b3a62a5db29269a

  • SHA256

    3c704a8a3b1263e92f07c9d215574789d1ffee30e63244cad63f060b752cfc6e

  • SHA512

    d5617fbde2e70eef795fa018c0ffcf83240a97b8544b5b83adfec23af64683d623d88c6813d57d11a60096e546b91e80352b5c033a66e37c2fa22badc2ca67b9

  • SSDEEP

    12288:qDXXVM2EXo9RA586lzFBEGWYiQ1m5wfkk0LDE/0q2hqT:qpMbXd8uHEfYiQ1Gw8vDEX2oT

Score
10/10
qakbottchk071702975817bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

tchk07

Campaign

1702975817

C2

116.203.56.11:443

109.107.181.8:443
Attributes
  • camp_date

    2023-12-19 08:50:17 +0000 UTC

Targets

    • Target

      12094a47a9659b1c2f7c5b36e21d2b0145c9e7b2e79845a437508efa96e5f305.exe

    • Size

      898KB

    • MD5

      88bbf2a743baaf81f7a312be61f90d76

    • SHA1

      3719aabc29d5eb58d5d2d2a37066047c67bfc2c6

    • SHA256

      12094a47a9659b1c2f7c5b36e21d2b0145c9e7b2e79845a437508efa96e5f305

    • SHA512

      b01f955eb5f840e01f1f65d5f19c0963e155b1f8d03b4e0720eccbd397cc9aee9a19a63000719e3cf8f580573a335bd61f39fe1261f44e1d5371a9c695b60b70

    • SSDEEP

      24576:qTm4c0TXhxdmVQGn88R7XM3Ljluc9KEaJqCjh0LmK8:6jP8Q13LjluSrCj+q/

    Score
    10/10
    qakbottchk071702975817bankerstealertrojan

    • Detect Qakbot Payload

    • Qakbot/Qbot

      Qbot or Qakbot is a sophisticated worm with banking capabilities.

      trojanbankerstealerqakbot
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks