Overview

overview

10

Static

static

3

a8e2e77d6e...18.dll

windows7-x64

10

a8e2e77d6e...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a8e2e77d6e1159face67ee36e5d4f199_JaffaCakes118

  • Size

    949KB

  • Sample

    240819-a2lsdsxerq

  • MD5

    a8e2e77d6e1159face67ee36e5d4f199

  • SHA1

    e3494981cfbc8c9a2c7a053c3ca4ab662b7f529c

  • SHA256

    307dcd0bd76ec40e3297813e65542bc6480262578d6623825340a5add4fb6bf8

  • SHA512

    c5e1f248a90e3406e690b1a7c3f6e09f4c1b3db5be40786669ba3aa1d48f0e6f2b0060dc3ee098fb76dfb59f2aec14aac5300556c69e214eef542561bc7df273

  • SSDEEP

    24576:sxvBJCYfTVuEw7wJarOIq0PqJtp050Yjpov:solEJtWyYqv

Score
10/10
qakbottr1613385567bankerdiscoverystealertrojan

Malware Config

Extracted

Family

qakbot

Version

401.138

Botnet

tr

Campaign

1613385567

C2

78.63.226.32:443

197.51.82.72:443

193.248.221.184:2222

95.77.223.148:443

71.199.192.62:443

77.211.30.202:995

80.227.5.69:443

77.27.204.204:995

81.97.154.100:443

173.184.119.153:995

38.92.225.121:443

81.150.181.168:2222

90.65.236.181:2222

83.110.103.152:443

73.153.211.227:443

188.25.63.105:443

89.137.211.239:995

202.188.138.162:443

98.173.34.212:995

87.202.87.210:2222
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      a8e2e77d6e1159face67ee36e5d4f199_JaffaCakes118

    • Size

      949KB

    • MD5

      a8e2e77d6e1159face67ee36e5d4f199

    • SHA1

      e3494981cfbc8c9a2c7a053c3ca4ab662b7f529c

    • SHA256

      307dcd0bd76ec40e3297813e65542bc6480262578d6623825340a5add4fb6bf8

    • SHA512

      c5e1f248a90e3406e690b1a7c3f6e09f4c1b3db5be40786669ba3aa1d48f0e6f2b0060dc3ee098fb76dfb59f2aec14aac5300556c69e214eef542561bc7df273

    • SSDEEP

      24576:sxvBJCYfTVuEw7wJarOIq0PqJtp050Yjpov:solEJtWyYqv

    Score
    10/10
    qakbottr1613385567bankerdiscoverystealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks