Overview

overview

10

Static

static

3

816852a0be...0N.dll

windows7-x64

10

816852a0be...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    816852a0beb6eb927af785e7ae361d70N.exe

  • Size

    846KB

  • Sample

    240827-p6dd5stcjp

  • MD5

    816852a0beb6eb927af785e7ae361d70

  • SHA1

    6677e31b1c261981db6dd9b293e06565fb5ceb5f

  • SHA256

    84108b96e59ba9871c1bcbf10b7f583a2cc3dcc2b94040f571528da74c864ae7

  • SHA512

    17d155b54cec4d2e548ce12133a6445f4d83dbd6767689a6e0d9c1a5d2eff8b8973b239563436f1daeba1aa84877e31866a9042c84ce6545253135f183ed59d9

  • SSDEEP

    24576:FKN+dFOInFkRHNPnQaEtToQbHBD92wJXI:ENGOZHBOt4wx

Score
10/10
qakbotobama591623694216bankerdiscoverystealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

obama59

Campaign

1623694216

C2

71.41.184.10:3389

47.22.148.6:443

96.253.46.210:443

188.26.180.140:443

75.118.1.141:443

90.65.234.26:2222

83.110.109.155:2222

76.25.142.196:443

45.46.53.140:2222

105.198.236.101:443

151.205.102.42:443

216.201.162.158:443

184.185.103.157:443

189.210.115.207:443

75.137.47.174:443

72.240.200.181:2222

75.67.192.125:443

24.55.112.61:443

72.252.201.69:443

24.179.77.236:443
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      816852a0beb6eb927af785e7ae361d70N.exe

    • Size

      846KB

    • MD5

      816852a0beb6eb927af785e7ae361d70

    • SHA1

      6677e31b1c261981db6dd9b293e06565fb5ceb5f

    • SHA256

      84108b96e59ba9871c1bcbf10b7f583a2cc3dcc2b94040f571528da74c864ae7

    • SHA512

      17d155b54cec4d2e548ce12133a6445f4d83dbd6767689a6e0d9c1a5d2eff8b8973b239563436f1daeba1aa84877e31866a9042c84ce6545253135f183ed59d9

    • SSDEEP

      24576:FKN+dFOInFkRHNPnQaEtToQbHBD92wJXI:ENGOZHBOt4wx

    Score
    10/10
    qakbotobama591623694216bankerdiscoverystealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks