Overview

overview

10

Static

static

3

687dc051e2...b9.dll

windows7-x64

10

687dc051e2...b9.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    687dc051e2ad960e082f45be2dba03665ad9dd5dd4c692bcebc302629970d8b9.exe

  • Size

    500KB

  • Sample

    241123-wmfhqavrfn

  • MD5

    3c634914aa7e71e9aa64ef7b80046162

  • SHA1

    9ee4437b7b48de4009e49e1dfcab6c9e1c72005f

  • SHA256

    687dc051e2ad960e082f45be2dba03665ad9dd5dd4c692bcebc302629970d8b9

  • SHA512

    7fc614efff737a6fbf91a369e30069f731de2030da6642f7e0195a6415820ed63d149309c9b59018d75073e9935059ce64db5ab5c6d93d75140ed026e9fb63f9

  • SSDEEP

    6144:V2N8aCbpt5e3JVAfqX+2Rr+nxQDBO03fHEe+:w87z5mvAfLfaEB

Score
10/10
qakbotobama1151634197867bankerdiscoveryevasionstealertrojan

Malware Config

Extracted

Family

qakbot

Version

402.363

Botnet

obama115

Campaign

1634197867

C2

91.178.126.51:995

220.255.25.28:2222

208.78.220.143:443

77.31.162.93:443

73.230.205.91:443

216.201.162.158:443

94.200.181.154:443

24.231.209.2:2222

89.137.52.44:443

140.82.49.12:443

65.100.174.110:32103

41.86.42.158:995

27.223.92.142:995

200.232.214.222:995

81.250.153.227:2222

217.17.56.163:465

122.60.71.201:995

120.150.218.241:995

41.228.22.180:443

69.30.186.190:443
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      687dc051e2ad960e082f45be2dba03665ad9dd5dd4c692bcebc302629970d8b9.exe

    • Size

      500KB

    • MD5

      3c634914aa7e71e9aa64ef7b80046162

    • SHA1

      9ee4437b7b48de4009e49e1dfcab6c9e1c72005f

    • SHA256

      687dc051e2ad960e082f45be2dba03665ad9dd5dd4c692bcebc302629970d8b9

    • SHA512

      7fc614efff737a6fbf91a369e30069f731de2030da6642f7e0195a6415820ed63d149309c9b59018d75073e9935059ce64db5ab5c6d93d75140ed026e9fb63f9

    • SSDEEP

      6144:V2N8aCbpt5e3JVAfqX+2Rr+nxQDBO03fHEe+:w87z5mvAfLfaEB

    Score
    10/10
    qakbotobama1151634197867bankerdiscoveryevasionstealertrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks