Overview

overview

10

Static

static

3

12094a47a9...05.dll

windows7-x64

10

12094a47a9...05.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d71d1b53db8a84f458dd0e1d09753e566da818fa792c2ea4d2e89fb59d83939a

  • Size

    437KB

  • Sample

    240417-qxp71shh72

  • MD5

    cfcbc0285cf00eed1eb11c47dbb3edfc

  • SHA1

    5f4bb2b8df17fd1c5a30bceb6c978ecace48aaf2

  • SHA256

    d71d1b53db8a84f458dd0e1d09753e566da818fa792c2ea4d2e89fb59d83939a

  • SHA512

    49028f5bd2a0d5cedfa9fcfd19e3ac66fd1084505b081a879e3bb484b620041d102d2510dd0ff1ae2c5f0e58f494dc1575dc7379e8e8d198d70d2068fd599fa1

  • SSDEEP

    12288:+HLTVKS9Wuc+KUyq/lqOeh1TUzTzLSOr2G2wZ7exYa:4TVZHcfUZlqzh1gTzLSRjK7OYa

Score
10/10
qakbottchk071702975817bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

tchk07

Campaign

1702975817

C2

116.203.56.11:443

109.107.181.8:443
Attributes
  • camp_date

    2023-12-19 08:50:17 +0000 UTC

Targets

    • Target

      12094a47a9659b1c2f7c5b36e21d2b0145c9e7b2e79845a437508efa96e5f305.exe

    • Size

      898KB

    • MD5

      88bbf2a743baaf81f7a312be61f90d76

    • SHA1

      3719aabc29d5eb58d5d2d2a37066047c67bfc2c6

    • SHA256

      12094a47a9659b1c2f7c5b36e21d2b0145c9e7b2e79845a437508efa96e5f305

    • SHA512

      b01f955eb5f840e01f1f65d5f19c0963e155b1f8d03b4e0720eccbd397cc9aee9a19a63000719e3cf8f580573a335bd61f39fe1261f44e1d5371a9c695b60b70

    • SSDEEP

      24576:qTm4c0TXhxdmVQGn88R7XM3Ljluc9KEaJqCjh0LmK8:6jP8Q13LjluSrCj+q/

    Score
    10/10
    qakbottchk071702975817bankerstealertrojan

    • Detect Qakbot Payload

    • Qakbot/Qbot

      Qbot or Qakbot is a sophisticated worm with banking capabilities.

      trojanbankerstealerqakbot
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks