Overview

overview

10

Static

static

3

t.dll

windows7-x64

10

t.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dump38

  • Size

    434KB

  • Sample

    240910-pc3f6stdjq

  • MD5

    829a48f5bc4f1690d112ab10cca39036

  • SHA1

    0307c51c4cb52e1f649ffc04a5808fb43eaf48da

  • SHA256

    51ff536b1f12c59753e3d3344b8df232c3fd7aafb49bf782e54058fc8f220e3f

  • SHA512

    64c8e4d2c2f7bbd8b8475ef2d1a589578222d15e10a03d4d73d533d878256f53a30f21eb44f0e0384a6e3064adfb89220bd1ccd129f909b42377e4712d2dd0e9

  • SSDEEP

    12288:+8vF3sBAiOV5BdRJ8Hvh6TTLxLv/mZBIMHQA1pIR+/WTLvpEkr:+Tf65XRJ8Ph6d6I+jCRnTLv6e

Score
10/10
qakbottchk071702975817bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

tchk07

Campaign

1702975817

C2

116.203.56.11:443

109.107.181.8:443
Attributes
  • camp_date

    2023-12-19 08:50:17 +0000 UTC

Targets

    • Target

      t.dll

    • Size

      898KB

    • MD5

      88bbf2a743baaf81f7a312be61f90d76

    • SHA1

      3719aabc29d5eb58d5d2d2a37066047c67bfc2c6

    • SHA256

      12094a47a9659b1c2f7c5b36e21d2b0145c9e7b2e79845a437508efa96e5f305

    • SHA512

      b01f955eb5f840e01f1f65d5f19c0963e155b1f8d03b4e0720eccbd397cc9aee9a19a63000719e3cf8f580573a335bd61f39fe1261f44e1d5371a9c695b60b70

    • SSDEEP

      24576:qTm4c0TXhxdmVQGn88R7XM3Ljluc9KEaJqCjh0LmK8:6jP8Q13LjluSrCj+q/

    Score
    10/10
    qakbottchk071702975817bankerstealertrojan

    • Detect Qakbot Payload

    • Qakbot/Qbot

      Qbot or Qakbot is a sophisticated worm with banking capabilities.

      trojanbankerstealerqakbot
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks