Overview

overview

10

Static

static

3

dbe7a269e7...dd.dll

windows7-x64

10

dbe7a269e7...dd.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dbe7a269e78263c6fb8c8b6752d072ace1d53de31daa3b522ca5e0c0e7243cdd.exe

  • Size

    890KB

  • Sample

    241122-2anapaxjcl

  • MD5

    b6a3a308b7cd33887069256f22ddfc88

  • SHA1

    e150f97c0956b996daa741233acd54509a24eb00

  • SHA256

    dbe7a269e78263c6fb8c8b6752d072ace1d53de31daa3b522ca5e0c0e7243cdd

  • SHA512

    9d60c19a39b815036ce5cf2169ded472f2c2656d5393a417fd8e8ca98d8de79c7a081a76bbb975b99e20917dd20411f7ddb485471be265e64fbc79498e606aad

  • SSDEEP

    24576:mvmCkM3miQH9ZfSCFEzIuViMKvb/o2ggJcWMeQRqg2:mvm+3m1jSCFoKvjjXJcl9qg2

Score
10/10
qakbotbiden541634810637bankerdiscoverystealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

biden54

Campaign

1634810637

C2

136.143.11.232:443

63.143.92.99:995

182.176.180.73:443

136.232.34.70:443

123.252.190.14:443

216.201.162.158:443

37.208.181.198:61200

140.82.49.12:443

197.89.144.102:443

89.137.52.44:443

109.12.111.14:443

78.191.24.189:995

105.198.236.99:995

196.207.140.40:995

41.235.69.115:443

2.222.167.138:443

117.198.156.56:443

24.231.209.2:6881

27.223.92.142:995

96.246.158.154:995
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      dbe7a269e78263c6fb8c8b6752d072ace1d53de31daa3b522ca5e0c0e7243cdd.exe

    • Size

      890KB

    • MD5

      b6a3a308b7cd33887069256f22ddfc88

    • SHA1

      e150f97c0956b996daa741233acd54509a24eb00

    • SHA256

      dbe7a269e78263c6fb8c8b6752d072ace1d53de31daa3b522ca5e0c0e7243cdd

    • SHA512

      9d60c19a39b815036ce5cf2169ded472f2c2656d5393a417fd8e8ca98d8de79c7a081a76bbb975b99e20917dd20411f7ddb485471be265e64fbc79498e606aad

    • SSDEEP

      24576:mvmCkM3miQH9ZfSCFEzIuViMKvb/o2ggJcWMeQRqg2:mvm+3m1jSCFoKvjjXJcl9qg2

    Score
    10/10
    qakbotbiden541634810637bankerdiscoverystealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks