Overview

overview

10

Static

static

3

3591ee9687...0N.dll

windows7-x64

10

3591ee9687...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3591ee9687efcf82512e8312a3761dd0N

  • Size

    1.1MB

  • Sample

    240826-qrwslswcph

  • MD5

    3591ee9687efcf82512e8312a3761dd0

  • SHA1

    4ee3a41ab87f00aea43381d793b04cf35fc668f5

  • SHA256

    15a0c3bdf110c5e35aff66cd303206416b87d5251d9834459de892eb1fbf35f9

  • SHA512

    e6aed5604f59d59e64502795960d9fc617d3a970ba412804a14fcb813a6e26188f8650faede6ea7d53fd3b40d029c6b04591484a07392d16e6b4c1a863658737

  • SSDEEP

    24576:m0u/lKPLdtj+bZLx1GRFqCbQ45N3OWP+9Gy:m0ilkaz4bx02N33+9Gy

Score
10/10
qakbotobama531622707574bankerdiscoverystealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

obama53

Campaign

1622707574

C2

71.187.170.235:443

197.45.110.165:995

96.61.23.88:995

122.58.117.81:995

184.185.103.157:443

136.232.34.70:443

92.96.3.180:2078

83.196.56.65:2222

105.198.236.101:443

24.179.77.236:443

75.67.192.125:443

71.163.222.223:443

24.152.219.253:995

47.22.148.6:443

92.59.35.196:2222

149.28.101.90:443

149.28.98.196:2222

45.32.211.207:995

144.202.38.185:443

45.77.115.208:443
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      3591ee9687efcf82512e8312a3761dd0N

    • Size

      1.1MB

    • MD5

      3591ee9687efcf82512e8312a3761dd0

    • SHA1

      4ee3a41ab87f00aea43381d793b04cf35fc668f5

    • SHA256

      15a0c3bdf110c5e35aff66cd303206416b87d5251d9834459de892eb1fbf35f9

    • SHA512

      e6aed5604f59d59e64502795960d9fc617d3a970ba412804a14fcb813a6e26188f8650faede6ea7d53fd3b40d029c6b04591484a07392d16e6b4c1a863658737

    • SSDEEP

      24576:m0u/lKPLdtj+bZLx1GRFqCbQ45N3OWP+9Gy:m0ilkaz4bx02N33+9Gy

    Score
    10/10
    qakbotobama531622707574bankerdiscoverystealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks