卡巴斯基：QakBot银行木马活动分析报告
Tags
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Hooking - T1617 Javascript - T1059.007 Vnc - T1021.005 Connection Proxy - T1090 Hooking - T1179 Hooking |
Common Information
| Type | Value |
|---|---|
| UUID | b065b705-0aa1-448a-b418-aeb9a37aa670 |
| Fingerprint | 3b710d55b6d71530 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Sept. 9, 2021, midnight |
| Added to db | Dec. 19, 2024, 1:31 p.m. |
| Last updated | Dec. 23, 2024, 7:22 a.m. |
| Headline | 卡巴斯基：QakBot银行木马活动分析报告 |
| Title | 卡巴斯基：QakBot银行木马活动分析报告 |
| Detected Hints/Tags/Attributes | 29/2/129 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://www.secrss.com/articles/34206 |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 463 | securelist.com |
|
| Details | Domain | 6752 | 163.com |
|
| Details | File | 4 | 3.sys |
|
| Details | File | 56 | trojan.js |
|
| Details | File | 29 | trojan-downloader.js |
|
| Details | IPv4 | 4 | 75.67.192.125 |
|
| Details | IPv4 | 2 | 24.179.77.236 |
|
| Details | IPv4 | 2 | 70.163.161.79 |
|
| Details | IPv4 | 4 | 72.240.200.181 |
|
| Details | IPv4 | 3 | 184.185.103.157 |
|
| Details | IPv4 | 3 | 78.63.226.32 |
|
| Details | IPv4 | 2 | 83.196.56.65 |
|
| Details | IPv4 | 5 | 95.77.223.148 |
|
| Details | IPv4 | 2 | 76.168.147.166 |
|
| Details | IPv4 | 3 | 105.198.236.99 |
|
| Details | IPv4 | 5 | 73.151.236.31 |
|
| Details | IPv4 | 2 | 64.121.114.87 |
|
| Details | IPv4 | 2 | 213.122.113.120 |
|
| Details | IPv4 | 3 | 97.69.160.4 |
|
| Details | IPv4 | 2 | 77.27.207.217 |
|
| Details | IPv4 | 3 | 105.198.236.101 |
|
| Details | IPv4 | 3 | 75.188.35.168 |
|
| Details | IPv4 | 2 | 31.4.242.233 |
|
| Details | IPv4 | 3 | 144.139.47.206 |
|
| Details | IPv4 | 6 | 173.21.10.71 |
|
| Details | IPv4 | 2 | 125.62.192.220 |
|
| Details | IPv4 | 2 | 83.110.109.155 |
|
| Details | IPv4 | 6 | 76.25.142.196 |
|
| Details | IPv4 | 3 | 195.12.154.8 |
|
| Details | IPv4 | 2 | 186.144.33.73 |
|
| Details | IPv4 | 7 | 67.165.206.193 |
|
| Details | IPv4 | 4 | 96.21.251.127 |
|
| Details | IPv4 | 3 | 149.28.98.196 |
|
| Details | IPv4 | 2 | 222.153.122.173 |
|
| Details | IPv4 | 3 | 71.199.192.62 |
|
| Details | IPv4 | 4 | 45.77.117.108 |
|
| Details | IPv4 | 6 | 45.46.53.140 |
|
| Details | IPv4 | 4 | 70.168.130.172 |
|
| Details | IPv4 | 3 | 45.32.211.207 |
|
| Details | IPv4 | 7 | 71.74.12.34 |
|
| Details | IPv4 | 3 | 82.12.157.95 |
|
| Details | IPv4 | 4 | 50.29.166.232 |
|
| Details | IPv4 | 3 | 209.210.187.52 |
|
| Details | IPv4 | 3 | 149.28.99.97 |
|
| Details | IPv4 | 7 | 109.12.111.14 |
|
| Details | IPv4 | 3 | 207.246.77.75 |
|
| Details | IPv4 | 3 | 68.186.192.69 |
|
| Details | IPv4 | 2 | 67.6.12.4 |
|
| Details | IPv4 | 2 | 188.27.179.172 |
|
| Details | IPv4 | 3 | 189.222.59.177 |
|
| Details | IPv4 | 3 | 149.28.101.90 |
|
| Details | IPv4 | 2 | 98.192.185.86 |
|
| Details | IPv4 | 2 | 174.104.22.30 |
|
| Details | IPv4 | 3 | 189.210.115.207 |
|
| Details | IPv4 | 3 | 142.117.191.18 |
|
| Details | IPv4 | 5 | 68.204.7.158 |
|
| Details | IPv4 | 3 | 189.146.183.105 |
|
| Details | IPv4 | 4 | 92.59.35.196 |
|
| Details | IPv4 | 2 | 75.137.47.174 |
|
| Details | IPv4 | 3 | 213.60.147.140 |
|
| Details | IPv4 | 3 | 45.63.107.192 |
|
| Details | IPv4 | 9 | 24.229.150.54 |
|
| Details | IPv4 | 3 | 196.221.207.137 |
|
| Details | IPv4 | 2 | 86.220.60.247 |
|
| Details | IPv4 | 3 | 108.46.145.30 |
|
| Details | IPv4 | 3 | 193.248.221.184 |
|
| Details | IPv4 | 3 | 187.250.238.164 |
|
| Details | IPv4 | 4 | 197.45.110.165 |
|
| Details | IPv4 | 5 | 151.205.102.42 |
|
| Details | IPv4 | 3 | 2.7.116.188 |
|
| Details | IPv4 | 2 | 71.41.184.10 |
|
| Details | IPv4 | 3 | 195.43.173.70 |
|
| Details | IPv4 | 2 | 96.253.46.210 |
|
| Details | IPv4 | 2 | 24.55.112.61 |
|
| Details | IPv4 | 3 | 106.250.150.98 |
|
| Details | IPv4 | 2 | 172.78.59.180 |
|
| Details | IPv4 | 4 | 24.139.72.117 |
|
| Details | IPv4 | 2 | 45.67.231.247 |
|
| Details | IPv4 | 2 | 90.65.234.26 |
|
| Details | IPv4 | 3 | 72.252.201.69 |
|
| Details | IPv4 | 3 | 83.110.103.152 |
|
| Details | IPv4 | 3 | 47.22.148.6 |
|
| Details | IPv4 | 2 | 175.143.92.16 |
|
| Details | IPv4 | 2 | 83.110.9.71 |
|
| Details | IPv4 | 2 | 100.2.20.137 |
|
| Details | IPv4 | 3 | 78.97.207.104 |
|
| Details | IPv4 | 2 | 46.149.81.250 |
|
| Details | IPv4 | 3 | 59.90.246.200 |
|
| Details | IPv4 | 3 | 144.202.38.185 |
|
| Details | IPv4 | 2 | 207.246.116.237 |
|
| Details | IPv4 | 3 | 80.227.5.69 |
|
| Details | IPv4 | 3 | 45.77.115.208 |
|
| Details | IPv4 | 3 | 125.63.101.62 |
|
| Details | IPv4 | 3 | 86.236.77.68 |
|
| Details | IPv4 | 2 | 109.106.69.138 |
|
| Details | IPv4 | 2 | 84.72.35.226 |
|
| Details | IPv4 | 2 | 71.163.222.223 |
|
| Details | IPv4 | 3 | 217.133.54.140 |
|
| Details | IPv4 | 3 | 98.252.118.134 |
|
| Details | IPv4 | 3 | 197.161.154.132 |
|
| Details | IPv4 | 5 | 96.37.113.36 |
|
| Details | IPv4 | 6 | 89.137.211.239 |
|
| Details | IPv4 | 3 | 27.223.92.142 |
|
| Details | IPv4 | 5 | 74.222.204.82 |
|
| Details | IPv4 | 6 | 24.152.219.253 |
|
| Details | IPv4 | 3 | 122.148.156.131 |
|
| Details | IPv4 | 2 | 24.95.61.62 |
|
| Details | IPv4 | 2 | 156.223.110.23 |
|
| Details | IPv4 | 2 | 96.61.23.88 |
|
| Details | IPv4 | 3 | 144.139.166.18 |
|
| Details | IPv4 | 2 | 92.96.3.180 |
|
| Details | IPv4 | 2 | 202.185.166.181 |
|
| Details | IPv4 | 7 | 71.187.170.235 |
|
| Details | IPv4 | 3 | 76.94.200.148 |
|
| Details | IPv4 | 7 | 50.244.112.106 |
|
| Details | IPv4 | 2 | 71.63.120.101 |
|
| Details | IPv4 | 6 | 140.82.49.12 |
|
| Details | IPv4 | 2 | 24.122.166.173 |
|
| Details | IPv4 | 3 | 196.151.252.84 |
|
| Details | IPv4 | 2 | 81.214.126.173 |
|
| Details | IPv4 | 3 | 73.25.124.140 |
|
| Details | IPv4 | 3 | 202.188.138.162 |
|
| Details | IPv4 | 5 | 216.201.162.158 |
|
| Details | IPv4 | 2 | 47.196.213.73 |
|
| Details | IPv4 | 3 | 74.68.144.202 |
|
| Details | IPv4 | 4 | 136.232.34.70 |
|
| Details | IPv4 | 2 | 186.154.175.13 |
|
| Details | IPv4 | 3 | 69.58.147.82 |
|
| Details | Url | 2 | https://securelist.com/qakbot-technical-analysis/103931 |