General
-
Target
bef46e00b74c84f8c4e22ec59705da188ac9b417f57f98239e0befa44700a7ad
-
Size
959KB
-
Sample
211214-tfn56shabp
-
MD5
e5ef2b91bcdb8037bb2465c84c28248b
-
SHA1
adaad69a8641a607d7fc77c7cd11d6981c8afde0
-
SHA256
bef46e00b74c84f8c4e22ec59705da188ac9b417f57f98239e0befa44700a7ad
-
SHA512
66c38499678ca3e21b4dfe9e91934357b3c85c542a1774ee98411660f64d7aa05d718c3095e33280275df631833dd0607ee3a40cd06b8abb754d97132bb7700c
Static task
static1
Behavioral task
behavioral1
Sample
bef46e00b74c84f8c4e22ec59705da188ac9b417f57f98239e0befa44700a7ad.dll
Resource
win7-en-20211208
Malware Config
Extracted
qakbot
403.10
cullinan
1639333530
65.100.174.110:443
173.21.10.71:2222
140.82.49.12:443
190.73.3.148:2222
76.25.142.196:443
71.74.12.34:443
31.215.98.160:443
93.48.80.198:995
45.9.20.200:2211
41.228.22.180:443
109.12.111.14:443
63.143.92.99:995
120.150.218.241:995
94.60.254.81:443
86.148.6.51:443
218.101.110.3:995
216.238.71.31:443
207.246.112.221:443
216.238.72.121:443
216.238.71.31:995
207.246.112.221:995
216.238.72.121:995
186.64.87.195:443
73.151.236.31:443
78.191.12.29:995
67.165.206.193:993
68.186.192.69:443
65.100.174.110:8443
89.137.52.44:443
75.188.35.168:995
105.198.236.99:995
182.176.180.73:443
103.142.10.177:443
136.232.34.70:443
68.204.7.158:443
27.223.92.142:995
102.65.38.67:443
189.175.200.244:80
100.1.119.41:443
73.140.38.124:443
73.171.4.177:443
89.101.97.139:443
24.229.150.54:995
72.252.201.34:995
39.49.44.85:995
2.222.167.138:443
96.37.113.36:993
117.248.109.38:21
39.43.130.50:995
75.169.58.229:32100
24.55.112.61:443
27.5.4.111:2222
197.89.144.207:443
73.5.119.219:443
136.143.11.232:443
86.98.36.211:443
106.220.76.130:443
129.208.139.229:995
45.46.53.140:2222
190.229.210.128:465
91.178.126.51:995
189.18.181.24:995
185.53.147.51:443
-
salt
jHxastDcds)oMc=jvh7wdUhxcsdt2
Targets
-
-
Target
bef46e00b74c84f8c4e22ec59705da188ac9b417f57f98239e0befa44700a7ad
-
Size
959KB
-
MD5
e5ef2b91bcdb8037bb2465c84c28248b
-
SHA1
adaad69a8641a607d7fc77c7cd11d6981c8afde0
-
SHA256
bef46e00b74c84f8c4e22ec59705da188ac9b417f57f98239e0befa44700a7ad
-
SHA512
66c38499678ca3e21b4dfe9e91934357b3c85c542a1774ee98411660f64d7aa05d718c3095e33280275df631833dd0607ee3a40cd06b8abb754d97132bb7700c
-
Loads dropped DLL
-