Overview

overview

10

Static

static

3

3f2b93693c...18.dll

windows7-x64

10

3f2b93693c...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f2b93693cb435f01245b6bea149fd4a_JaffaCakes118

  • Size

    1.3MB

  • Sample

    241013-lvbvdsvdqp

  • MD5

    3f2b93693cb435f01245b6bea149fd4a

  • SHA1

    48fa4115e07d1fafb608f78bd7a4cecaf3a6125a

  • SHA256

    f300aec16dce68a11657edef3530a645f0ef26eef456c631edbb536ae6ac9509

  • SHA512

    190b7d167ff83abb9b9565c1f09ac18977c7a700200a2af2aff708663b115d227107820be928fd6230cd99aa4890262d1044f8bcc1daa96614d1b117cb996ba8

  • SSDEEP

    24576:+iWgjZ6nrdmwpViRRXNX/Wumo7awRAYZJBihgSxtFyYiPw:H0TuvOXYDBieaFyYB

Score
10/10
qakbottr_domain1632769003bankerdiscoverystealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

tr_domain

Campaign

1632769003

C2

140.82.49.12:443

186.18.205.199:995

177.130.82.197:2222

72.252.201.69:443

173.21.10.71:2222

67.165.206.193:993

37.210.152.224:995

68.204.7.158:443

89.101.97.139:443

47.22.148.6:443

120.151.47.189:443

47.40.196.233:2222

24.229.150.54:995

81.250.153.227:2222

76.25.142.196:443

71.74.12.34:443

181.118.183.94:443

24.55.112.61:443

24.139.72.117:443

120.150.218.241:995
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      3f2b93693cb435f01245b6bea149fd4a_JaffaCakes118

    • Size

      1.3MB

    • MD5

      3f2b93693cb435f01245b6bea149fd4a

    • SHA1

      48fa4115e07d1fafb608f78bd7a4cecaf3a6125a

    • SHA256

      f300aec16dce68a11657edef3530a645f0ef26eef456c631edbb536ae6ac9509

    • SHA512

      190b7d167ff83abb9b9565c1f09ac18977c7a700200a2af2aff708663b115d227107820be928fd6230cd99aa4890262d1044f8bcc1daa96614d1b117cb996ba8

    • SSDEEP

      24576:+iWgjZ6nrdmwpViRRXNX/Wumo7awRAYZJBihgSxtFyYiPw:H0TuvOXYDBieaFyYB

    Score
    10/10
    qakbottr_domain1632769003bankerdiscoverystealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks