Overview

overview

10

Static

static

3

bfe84bbe4c...0N.dll

windows7-x64

10

bfe84bbe4c...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bfe84bbe4c2b817a7bc613a23344e290N

  • Size

    1.0MB

  • Sample

    240827-lfr8tswalm

  • MD5

    bfe84bbe4c2b817a7bc613a23344e290

  • SHA1

    d02dac6518e1608af4c551b03884c9565cc4c4e0

  • SHA256

    19ee325710a2d42876ea27a2cb2f0be0e48b0d84e54b422511f3463969feb338

  • SHA512

    0e4a15aad032076f1444d7180fb28876626a5f14d2a8703ad31cbbcf8a72e2a91610215d8e6c337e845cbc22ff54ae683b7550387772131c1b6962a8123e965f

  • SSDEEP

    6144:pwexqEM8055EX+dridb0+NCirQ6TBByIeJzt93S0EE8cuFA6EpnznituagDgwzyO:2exF055EX+dW1VONPfzituaC9zbLn

Score
10/10
qakbotbiden511622109872bankerdiscoverystealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

biden51

Campaign

1622109872

C2

97.69.160.4:2222

96.37.113.36:993

50.244.112.106:443

172.78.43.46:443

47.22.148.6:443

197.45.110.165:995

71.187.170.235:443

75.67.192.125:443

96.61.23.88:995

140.82.49.12:443

81.97.154.100:443

122.58.117.81:995

105.198.236.99:443

68.186.192.69:443

92.59.35.196:2222

149.28.98.196:443

45.32.211.207:995

45.32.211.207:2222

45.77.115.208:2222

144.202.38.185:2222
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      bfe84bbe4c2b817a7bc613a23344e290N

    • Size

      1.0MB

    • MD5

      bfe84bbe4c2b817a7bc613a23344e290

    • SHA1

      d02dac6518e1608af4c551b03884c9565cc4c4e0

    • SHA256

      19ee325710a2d42876ea27a2cb2f0be0e48b0d84e54b422511f3463969feb338

    • SHA512

      0e4a15aad032076f1444d7180fb28876626a5f14d2a8703ad31cbbcf8a72e2a91610215d8e6c337e845cbc22ff54ae683b7550387772131c1b6962a8123e965f

    • SSDEEP

      6144:pwexqEM8055EX+dridb0+NCirQ6TBByIeJzt93S0EE8cuFA6EpnznituagDgwzyO:2exF055EX+dW1VONPfzituaC9zbLn

    Score
    10/10
    qakbotbiden511622109872bankerdiscoverystealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks