General
-
Target
450184.dll
-
Size
131KB
-
Sample
211015-18mw5sbef7
-
MD5
9ce1e32e3d046f8d48fdd17f49d7a3da
-
SHA1
e0cd269248501022f9cf8cd31b678e039cb029d1
-
SHA256
31115320c06d44714df32b4c26f33a8e14396f97ad46433cd30ec3eee01b2750
-
SHA512
6c8d0bce56f282d235df8715d5d46ff1e020f8293ce3e1b0053515a6d6527e97a626d5395273a7d2fb251717cae840dc99878794a42f2964db7cbafd66e29232
Static task
static1
Behavioral task
behavioral1
Sample
450184.dll
Resource
win7-en-20210920
Malware Config
Extracted
qakbot
402.363
domain01
1632765151
173.21.10.71:2222
67.165.206.193:993
37.210.152.224:995
68.204.7.158:443
89.101.97.139:443
47.22.148.6:443
120.151.47.189:443
47.40.196.233:2222
24.229.150.54:995
81.250.153.227:2222
76.25.142.196:443
71.74.12.34:443
181.118.183.94:443
24.55.112.61:443
24.139.72.117:443
120.150.218.241:995
185.250.148.74:443
109.12.111.14:443
140.82.49.12:443
177.130.82.197:2222
72.252.201.69:443
187.156.138.172:443
95.77.223.148:443
71.80.168.245:443
81.241.252.59:2078
45.46.53.140:2222
105.157.55.133:995
82.77.137.101:995
173.234.155.233:443
136.232.34.70:443
105.198.236.99:443
103.148.120.144:443
27.223.92.142:995
73.151.236.31:443
75.188.35.168:443
5.238.149.235:61202
73.77.87.137:443
182.176.112.182:443
96.37.113.36:993
75.66.88.33:443
162.244.227.34:443
216.201.162.158:443
92.59.35.196:2222
196.218.227.241:995
68.207.102.78:443
2.188.27.77:443
189.210.115.207:443
181.163.96.53:443
75.107.26.196:465
185.250.148.74:2222
68.186.192.69:443
24.152.219.253:995
-
salt
jHxastDcds)oMc=jvh7wdUhxcsdt2
Targets
-
-
Target
450184.dll
-
Size
131KB
-
MD5
9ce1e32e3d046f8d48fdd17f49d7a3da
-
SHA1
e0cd269248501022f9cf8cd31b678e039cb029d1
-
SHA256
31115320c06d44714df32b4c26f33a8e14396f97ad46433cd30ec3eee01b2750
-
SHA512
6c8d0bce56f282d235df8715d5d46ff1e020f8293ce3e1b0053515a6d6527e97a626d5395273a7d2fb251717cae840dc99878794a42f2964db7cbafd66e29232
-
Loads dropped DLL
-
Drops file in System32 directory
-