Overview

overview

10

Static

static

3

b2b6796ae9...f1.dll

windows7-x64

10

b2b6796ae9...f1.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    16729766851.zip

  • Size

    434KB

  • Sample

    240418-sdhpyahd31

  • MD5

    fcb2964c241c04a9558a2f59f398a456

  • SHA1

    9910d81cdeb857e00186b49c340d18d50e866f31

  • SHA256

    0b93ac5c0413a9c7aa7be511511255c384478ee3edfe2acd9e2583374786a90e

  • SHA512

    82c1bdacd739ea0abd7c9ad46dd7ceca2adf45546b000763b1841cf44e5e708976663a5f494d7178ab8aa637f8b461def07087195ba583c95db631bc401d468b

  • SSDEEP

    12288:cdjFV3fgpkHBFKP/bJHaz87kYRwSjQcBp9+UlF2:oF1mkhoK87kgR0IpJy

Score
10/10
qakbotobama2161666689942bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Version

403.1051

Botnet

obama216

Campaign

1666689942

C2

24.116.45.121:443

24.206.27.39:443

71.199.168.185:443

70.115.104.126:443

190.24.45.24:995

24.9.220.167:443

68.62.199.70:443

43.241.159.238:443

113.162.196.232:443

156.217.60.239:995

197.204.70.167:443

197.202.196.43:443

24.130.228.100:443

41.109.228.108:995

64.123.103.123:443

190.193.180.228:443

24.177.111.153:443

60.54.65.27:443

189.129.38.158:2222

206.1.164.250:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      b2b6796ae9acccfec8b66eddf6530e2bc81ad9a0787153ac24dd113501c395f1

    • Size

      728KB

    • MD5

      d286333b564b887e1e8353e4ccde7338

    • SHA1

      dc2c2f01b4276ff7a07cb907d60d91406af4ada4

    • SHA256

      b2b6796ae9acccfec8b66eddf6530e2bc81ad9a0787153ac24dd113501c395f1

    • SHA512

      e29e4cef25308b53e85ca32f6848dc81be209339af8fc6bc30b1d78b2bc33a84a1bc85df1f81c441931d2d9889c1a1510c48b4a4e1b41ba6222b8d3b8269dd5f

    • SSDEEP

      12288:9Zvx07iKfDISZYRobaZ0UrIBfUQ0eIRM4WV6nwldJOCPrHuD5:9ta1DjZBBAgdkM4F6dMCjHu

    Score
    10/10
    qakbotobama2161666689942bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks