Overview

overview

10

Static

static

3

780be7a70c...f3.dll

windows7-x64

10

780be7a70c...f3.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    50579f60434dc090c747bf01985ddfb348b19ced73767a2d6030cda4babad6cc

  • Size

    256KB

  • Sample

    240417-qxh4psbe31

  • MD5

    98c21684c042954315531878272a0399

  • SHA1

    ee9d4d19488df78784b3f23011e90e8991375b0c

  • SHA256

    50579f60434dc090c747bf01985ddfb348b19ced73767a2d6030cda4babad6cc

  • SHA512

    97ce3286c1c224648b8f6a1e528fe0964af5f66c0d38a14e5f412aa3dd312ae62a6bb49a056bbc38a43c45ab3e0d322f699701dc6ac33b8a6bdb97fe9f63ecb2

  • SSDEEP

    6144:98xke5ztqnO8nlxzIlISKdngzasfhZnvjh1UY0qy:9+5tq7zIlInmXdicy

Score
10/10
qakbottchk061702463600bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

tchk06

Campaign

1702463600

C2

45.138.74.191:443

65.108.218.24:443
Attributes
  • camp_date

    2023-12-13 10:33:20 +0000 UTC

Targets

    • Target

      780be7a70ce3567ef268f6c768fc5a3d2510310c603bf481ebffd65e4fe95ff3.exe

    • Size

      459KB

    • MD5

      0a29918110937641bbe4a2d5ee5e4272

    • SHA1

      7d4a6976c1ece81e01d1f16ac5506266d5210734

    • SHA256

      780be7a70ce3567ef268f6c768fc5a3d2510310c603bf481ebffd65e4fe95ff3

    • SHA512

      998a6ee2fa6b345aeea72afaa91add8433e986a2678dbb8995ead786c30bdc00704c39c4857935b20669005b292736d50e1c6ad38901aa1f29db7b6a597fae3f

    • SSDEEP

      6144:T4+8LGS5U/dvT6+adDaMuMeek1Wg3NkA+8hMzA1W9xCTSI:8fZ5U/dvPadDrNebWg3N+QMc16MOI

    Score
    10/10
    qakbottchk061702463600bankerstealertrojan

    • Detect Qakbot Payload

    • Qakbot/Qbot

      Qbot or Qakbot is a sophisticated worm with banking capabilities.

      trojanbankerstealerqakbot
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks