Overview

overview

10

Static

static

3

fb8c90ad31...d3.exe

windows7-x64

10

fb8c90ad31...d3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb8c90ad316863ca266ee2668c3f48d3

  • Size

    270KB

  • Sample

    240917-warefswcjr

  • MD5

    fb8c90ad316863ca266ee2668c3f48d3

  • SHA1

    4cbc8da102d6eb528ece5b3e4d01bd80fd1f4164

  • SHA256

    d7b93ea7ab7c8cb0e3f04ea8c913833b0be54abbf1f1016d4ffe951b5a706ecd

  • SHA512

    7f21ec7a1af90e785484a499a5cf4d0c3d6677484aee5ecaa72672c145af8c250d4d3c865d2c510acaf407cdb6e1fd01aa2e468f943fb935c2c9d02b05c6aa36

  • SSDEEP

    6144:ULfhdM/bXZswyIZkEuHrBuYFCAN8XkwDLP8gx:GvKbXWENyuejg2gx

Score
10/10
qakbotabc0261604404702bankerdiscoverystealertrojan

Malware Config

Extracted

Family

qakbot

Version

325.59

Botnet

abc026

Campaign

1604404702

C2

96.243.35.201:443

46.53.16.93:443

217.165.2.92:995

37.106.7.143:443

67.6.55.77:443

89.136.39.108:443

2.50.58.76:443

188.25.158.61:443

45.63.107.192:995

45.32.154.10:443

94.52.160.116:443

45.63.107.192:2222

45.63.107.192:443

72.204.242.138:465

84.117.176.32:443

95.77.223.148:443

47.146.39.147:443

41.225.13.128:8443

80.14.209.42:2222

190.220.8.10:995

Targets

    • Target

      fb8c90ad316863ca266ee2668c3f48d3

    • Size

      270KB

    • MD5

      fb8c90ad316863ca266ee2668c3f48d3

    • SHA1

      4cbc8da102d6eb528ece5b3e4d01bd80fd1f4164

    • SHA256

      d7b93ea7ab7c8cb0e3f04ea8c913833b0be54abbf1f1016d4ffe951b5a706ecd

    • SHA512

      7f21ec7a1af90e785484a499a5cf4d0c3d6677484aee5ecaa72672c145af8c250d4d3c865d2c510acaf407cdb6e1fd01aa2e468f943fb935c2c9d02b05c6aa36

    • SSDEEP

      6144:ULfhdM/bXZswyIZkEuHrBuYFCAN8XkwDLP8gx:GvKbXWENyuejg2gx

    Score
    10/10
    qakbotabc0261604404702bankerdiscoverystealertrojan

    • Qakbot/Qbot

      Qbot or Qakbot is a sophisticated worm with banking capabilities.

      trojanbankerstealerqakbot

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks