Overview

overview

10

Static

static

3

2684aad68d...18.dll

windows7-x64

10

2684aad68d...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2684aad68d0f655dd6b5c20fcec97870_JaffaCakes118
  • Size 443KB
  • Sample240704-2rttsstfkp
  • SHA256 c0d4674f54afb4ac2f25ff97db09eb8e482bdd737ac4ad24d9dae3a4330e35c5
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
qakbotkrk011611569149bankerstealertrojan

Malware Config

Extracted

Family

  • qakbot

Version

  • 401.138

Botnet

  • krk01

Campaign

  • 1611569149

C2

  • 31.5.21.66:995

  • 89.3.198.238:443

  • 202.188.138.162:443

  • 188.24.128.253:443

  • 175.141.219.71:443

  • 151.60.15.183:443

  • 184.189.122.72:443

  • 80.227.5.70:443

  • 140.82.49.12:443

  • 89.211.241.100:995

  • 81.97.154.100:443

  • 77.27.174.49:995

  • 92.154.83.96:2078

  • 42.3.8.54:443

  • 71.187.170.235:443

  • 46.153.36.53:995

  • 71.182.142.63:443

  • 105.186.102.16:443

  • 50.244.112.106:443

  • 78.63.226.32:443

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target
      2684aad68d0f655dd6b5c20fcec97870_JaffaCakes118
    • Size 443KB
    • SHA256 c0d4674f54afb4ac2f25ff97db09eb8e482bdd737ac4ad24d9dae3a4330e35c5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    qakbotkrk011611569149bankerstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks