Overview

overview

10

Static

static

3

2365810c6a...0N.dll

windows7-x64

10

2365810c6a...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2365810c6a1e16235da63955852714d0N.exe

  • Size

    846KB

  • Sample

    240829-pnh7ns1fnc

  • MD5

    2365810c6a1e16235da63955852714d0

  • SHA1

    30e155724bdb7e5a2dd4816dfce0807e0d7cd4ac

  • SHA256

    a404ffd4811078a0236155ea63cb5eac5e5f43f9d19e9094a7dcb50635da86a9

  • SHA512

    8dbf309cb04043d769d88bc5fc0c26c18aea6fe7c6aa7014f5ce46aa192782960bbd96f710a59502c152406336ed3f0e023fe10aec6312b6da869fc79e584d70

  • SSDEEP

    24576:FKN+dFOInFkRHNPnQaEtTVQbHBD92wJXI:ENGOZHBft4wx

Score
10/10
qakbotobama591623694216bankerdiscoverystealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

obama59

Campaign

1623694216

C2

71.41.184.10:3389

47.22.148.6:443

96.253.46.210:443

188.26.180.140:443

75.118.1.141:443

90.65.234.26:2222

83.110.109.155:2222

76.25.142.196:443

45.46.53.140:2222

105.198.236.101:443

151.205.102.42:443

216.201.162.158:443

184.185.103.157:443

189.210.115.207:443

75.137.47.174:443

72.240.200.181:2222

75.67.192.125:443

24.55.112.61:443

72.252.201.69:443

24.179.77.236:443
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      2365810c6a1e16235da63955852714d0N.exe

    • Size

      846KB

    • MD5

      2365810c6a1e16235da63955852714d0

    • SHA1

      30e155724bdb7e5a2dd4816dfce0807e0d7cd4ac

    • SHA256

      a404ffd4811078a0236155ea63cb5eac5e5f43f9d19e9094a7dcb50635da86a9

    • SHA512

      8dbf309cb04043d769d88bc5fc0c26c18aea6fe7c6aa7014f5ce46aa192782960bbd96f710a59502c152406336ed3f0e023fe10aec6312b6da869fc79e584d70

    • SSDEEP

      24576:FKN+dFOInFkRHNPnQaEtTVQbHBD92wJXI:ENGOZHBft4wx

    Score
    10/10
    qakbotobama591623694216bankerdiscoverystealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks