Overview

overview

10

Static

static

3

8a9e4fd8a7...0N.dll

windows7-x64

10

8a9e4fd8a7...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a9e4fd8a71dad258aa4194fe048cab0N

  • Size

    767KB

  • Sample

    240826-2yr9js1erm

  • MD5

    8a9e4fd8a71dad258aa4194fe048cab0

  • SHA1

    d54e49bf7d89129f622ca1eb3f18a9407fea3c85

  • SHA256

    0cbbe45612c703f375e92c7d1e89b24f983a121f33fd993bed3c83a81b085691

  • SHA512

    99496323e64301060c5ac5a47ccf15c7fdaeec7b2d7234e188c2b4af272f770705e66fb1c82be9436df48b17eab82dd429af9776f6df82749e5b999dd6f1ed34

  • SSDEEP

    12288:lAvUdzh0w/9thCb8PKrfKiThZ7BtDrj5nCaoGWqz1USGmfnI5RuHqep8FQPe6EhL:liUdhP/XKeKrLhZDVf5WeHocqi8OREN

Score
10/10
qakbotbiden521622646137bankerdiscoverystealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

biden52

Campaign

1622646137

C2

184.185.103.157:443

71.187.170.235:443

86.220.62.251:2222

75.67.192.125:443

96.61.23.88:995

92.96.3.180:2078

72.252.201.69:443

24.152.219.253:995

105.198.236.101:443

24.179.77.236:443

189.210.115.207:443

81.97.154.100:443

47.22.148.6:443

45.77.115.208:443

149.28.98.196:443

45.77.115.208:2222

144.202.38.185:995

45.77.115.208:8443

207.246.77.75:8443

207.246.77.75:443
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      8a9e4fd8a71dad258aa4194fe048cab0N

    • Size

      767KB

    • MD5

      8a9e4fd8a71dad258aa4194fe048cab0

    • SHA1

      d54e49bf7d89129f622ca1eb3f18a9407fea3c85

    • SHA256

      0cbbe45612c703f375e92c7d1e89b24f983a121f33fd993bed3c83a81b085691

    • SHA512

      99496323e64301060c5ac5a47ccf15c7fdaeec7b2d7234e188c2b4af272f770705e66fb1c82be9436df48b17eab82dd429af9776f6df82749e5b999dd6f1ed34

    • SSDEEP

      12288:lAvUdzh0w/9thCb8PKrfKiThZ7BtDrj5nCaoGWqz1USGmfnI5RuHqep8FQPe6EhL:liUdhP/XKeKrLhZDVf5WeHocqi8OREN

    Score
    10/10
    qakbotbiden521622646137bankerdiscoverystealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks