Overview

overview

10

Static

static

3

366c4b93b1...0N.dll

windows7-x64

10

366c4b93b1...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    366c4b93b1a8f795127124e836a65d70N.exe

  • Size

    734KB

  • Sample

    240902-n4bl4azbmp

  • MD5

    366c4b93b1a8f795127124e836a65d70

  • SHA1

    17466005fcee2baeca76160aeb5c34424a766b27

  • SHA256

    f7462a35aaa8583e9542ff3be84fbbf2d660dab2b5c06420c2d8b9458e051b15

  • SHA512

    00900ce8dd2ad8d1fab3a602e2772b6e96cda5dd83cd13168af39aa7d6309fea2aaacf392f06eb831efb1cbc16bfc27fb93e9f6977d592c0c6f5fcde02fd297c

  • SSDEEP

    12288:fGSFZtn+x2EuQLTasmztiTDyNMGRC5oHND+oC2/aUVglr3bxMCfwu17:emZtSfuOutQr5oHND+oC6aUVSr6CJl

Score
10/10
qakbotaa1654167455bankerdiscoverystealertrojan

Malware Config

Extracted

Family

qakbot

Version

403.688

Botnet

AA

Campaign

1654167455

C2

37.34.253.233:443

75.99.168.194:61201

182.191.92.203:995

121.7.223.45:2222

210.246.4.69:995

47.23.89.60:993

217.165.176.49:2222

89.211.179.247:2222

148.0.61.36:443

74.14.5.179:2222

118.172.248.47:443

80.11.74.81:2222

85.246.82.244:443

67.165.206.193:993

186.90.153.162:2222

124.40.244.115:2222

120.150.218.241:995

5.32.41.45:443

177.94.57.126:32101

31.35.28.29:443
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      366c4b93b1a8f795127124e836a65d70N.exe

    • Size

      734KB

    • MD5

      366c4b93b1a8f795127124e836a65d70

    • SHA1

      17466005fcee2baeca76160aeb5c34424a766b27

    • SHA256

      f7462a35aaa8583e9542ff3be84fbbf2d660dab2b5c06420c2d8b9458e051b15

    • SHA512

      00900ce8dd2ad8d1fab3a602e2772b6e96cda5dd83cd13168af39aa7d6309fea2aaacf392f06eb831efb1cbc16bfc27fb93e9f6977d592c0c6f5fcde02fd297c

    • SSDEEP

      12288:fGSFZtn+x2EuQLTasmztiTDyNMGRC5oHND+oC2/aUVglr3bxMCfwu17:emZtSfuOutQr5oHND+oC6aUVSr6CJl

    Score
    10/10
    qakbotaa1654167455bankerdiscoverystealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks