Overview

overview

10

Static

static

3

7dfa266e30...0a.dll

windows7-x64

10

7dfa266e30...0a.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7dfa266e30c6d2fac279a3c54ebd7a3d6583e40e414ccd8e4b94356b2030f80a

  • Size

    860KB

  • Sample

    240825-a45naazhmk

  • MD5

    7325eedf7171d7cc25a516fe08783a59

  • SHA1

    1c5d702429f4f7f0ecbc90e4ddbb2cd5bc653bd3

  • SHA256

    7dfa266e30c6d2fac279a3c54ebd7a3d6583e40e414ccd8e4b94356b2030f80a

  • SHA512

    825becb5076b7b744b968fc2494e49e62f08c130eb6a2ea9f23b823988e86b2ca79ab3cc85b8dc09ab1cd64bed389aaf35e9b554bed462cb76e63293e0168b97

  • SSDEEP

    24576:fIptuPy6ESrgSmBkaS3sgt5WeHocqi8ORE:Itua0H5WeHd

Score
10/10
qakbotobama451621412882bankerdiscoverystealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

obama45

Campaign

1621412882

C2

50.244.112.106:443

24.179.77.148:443

86.157.25.253:443

95.77.223.148:443

172.78.43.46:443

45.63.107.192:443

47.22.148.6:443

197.45.110.165:995

24.122.166.173:443

45.63.107.192:995

149.28.99.97:995

71.187.170.235:443

105.198.236.101:443

144.139.47.206:443

115.133.243.6:443

81.214.126.173:2222

86.220.62.251:2222

105.198.236.99:443

96.61.23.88:995

75.67.192.125:443
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      7dfa266e30c6d2fac279a3c54ebd7a3d6583e40e414ccd8e4b94356b2030f80a

    • Size

      860KB

    • MD5

      7325eedf7171d7cc25a516fe08783a59

    • SHA1

      1c5d702429f4f7f0ecbc90e4ddbb2cd5bc653bd3

    • SHA256

      7dfa266e30c6d2fac279a3c54ebd7a3d6583e40e414ccd8e4b94356b2030f80a

    • SHA512

      825becb5076b7b744b968fc2494e49e62f08c130eb6a2ea9f23b823988e86b2ca79ab3cc85b8dc09ab1cd64bed389aaf35e9b554bed462cb76e63293e0168b97

    • SSDEEP

      24576:fIptuPy6ESrgSmBkaS3sgt5WeHocqi8ORE:Itua0H5WeHd

    Score
    10/10
    qakbotobama451621412882bankerdiscoverystealertrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks