Overview

overview

10

Static

static

3

12094a47a9...05.dll

windows7-x64

10

12094a47a9...05.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    12094a47a9659b1c2f7c5b36e21d2b0145c9e7b2e79845a437508efa96e5f305.zip

  • Size

    437KB

  • Sample

    241017-ns5qsswakh

  • MD5

    2ddca649a232ff02c3c1c5b1e791a092

  • SHA1

    e05f3893322ba196248ecf8e471adbce086f6cdc

  • SHA256

    881cb11ffc66771dbaa00ac3f530395a53309206407b78d79cbc9c8215611754

  • SHA512

    ba7ed60f1482c8d04209ed965251c8a39f09b09a0a40177b96ce90a0ddb0f2f518045789a19da4ba223286b28fa22f1ad43b13d0011625a1ae54288b69fa0af4

  • SSDEEP

    12288:ZnIXOg9L09AdsQZAj9h1/v7gXxbPIq9HgqTftPf:xIegK90Zu1MXxPpTfp

Score
10/10
qakbottchk071702975817bankerstealertrojan

Malware Config

Extracted

Family

qakbot

Botnet

tchk07

Campaign

1702975817

C2

116.203.56.11:443

109.107.181.8:443
Attributes
  • camp_date

    2023-12-19 08:50:17 +0000 UTC

Targets

    • Target

      12094a47a9659b1c2f7c5b36e21d2b0145c9e7b2e79845a437508efa96e5f305.exe

    • Size

      898KB

    • MD5

      88bbf2a743baaf81f7a312be61f90d76

    • SHA1

      3719aabc29d5eb58d5d2d2a37066047c67bfc2c6

    • SHA256

      12094a47a9659b1c2f7c5b36e21d2b0145c9e7b2e79845a437508efa96e5f305

    • SHA512

      b01f955eb5f840e01f1f65d5f19c0963e155b1f8d03b4e0720eccbd397cc9aee9a19a63000719e3cf8f580573a335bd61f39fe1261f44e1d5371a9c695b60b70

    • SSDEEP

      24576:qTm4c0TXhxdmVQGn88R7XM3Ljluc9KEaJqCjh0LmK8:6jP8Q13LjluSrCj+q/

    Score
    10/10
    qakbottchk071702975817bankerstealertrojan

    • Detect Qakbot Payload

    • Qakbot/Qbot

      Qbot or Qakbot is a sophisticated worm with banking capabilities.

      trojanbankerstealerqakbot
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks