General
-
Target
5b3d7ff4aab40fbaed4a1109a88a88f2583314718c5cc5eb37a7f219d61a1b53
-
Size
512KB
-
Sample
211218-jv1seafdgn
-
MD5
13dd38ab50726f4fe35fef1cdd2bac40
-
SHA1
4b1ae77144cc52db8d9bd9502d635d8eafaee563
-
SHA256
5b3d7ff4aab40fbaed4a1109a88a88f2583314718c5cc5eb37a7f219d61a1b53
-
SHA512
361d45f9aaa85eb387f2e64bad1d2868a6635f851b1e4e15e79a5bfbfd15f7243ae1783ba06f2e2f6ebd2a0e425bbda0b774a10d4a117970c277d3a75d6e9359
Static task
static1
Behavioral task
behavioral1
Sample
5b3d7ff4aab40fbaed4a1109a88a88f2583314718c5cc5eb37a7f219d61a1b53.dll
Resource
win7-en-20211208
Malware Config
Extracted
qakbot
403.10
cullinan
1639742517
50.238.6.36:443
92.167.4.71:2222
89.137.52.44:443
105.198.236.99:995
117.248.109.38:21
106.51.48.170:50001
120.150.218.241:995
190.73.3.148:2222
182.56.53.180:443
186.64.87.213:443
103.142.10.177:443
65.100.174.110:443
96.21.251.127:2222
24.95.61.62:443
194.36.28.26:443
182.191.92.203:995
41.228.22.180:443
63.143.92.99:995
41.200.112.42:443
103.143.8.71:995
109.12.111.14:443
93.48.80.198:995
32.221.229.7:443
140.82.49.12:443
114.79.145.28:443
24.152.219.253:995
89.101.97.139:443
68.186.192.69:443
45.9.20.200:2211
111.125.245.116:995
136.232.34.70:443
5.54.35.115:995
75.110.250.187:443
114.79.148.170:443
63.153.187.104:443
75.188.35.168:995
24.53.49.240:443
78.101.82.198:995
74.15.2.252:2222
94.200.181.154:995
136.143.11.232:443
149.135.101.20:443
24.178.196.158:2222
96.80.109.57:995
217.128.93.27:2222
84.199.230.66:443
217.165.123.47:61200
209.210.95.228:32100
78.101.82.198:443
67.209.195.198:443
38.70.253.226:2222
80.14.196.176:2222
24.222.20.254:443
39.49.9.35:995
76.169.147.192:32103
86.98.53.83:443
218.101.110.3:995
14.96.67.177:443
182.176.180.73:443
182.56.57.23:995
87.70.93.83:443
73.151.236.31:443
59.88.160.74:443
181.208.248.98:443
67.165.206.193:993
173.21.10.71:2222
76.25.142.196:443
59.6.7.83:61200
65.128.36.247:443
71.74.12.34:443
23.233.146.92:443
187.172.160.115:443
70.51.134.181:2222
40.134.247.125:995
94.60.254.81:443
93.48.58.123:2222
73.5.119.219:443
100.1.119.41:443
72.252.201.34:995
75.169.58.229:32100
173.71.147.134:995
108.4.67.252:443
69.46.15.180:443
50.237.134.22:995
23.82.128.108:443
5.36.7.212:443
200.75.131.234:443
187.189.86.168:443
82.77.137.101:995
187.201.90.81:443
24.55.112.61:443
201.172.31.95:443
78.180.163.25:995
216.238.72.121:443
86.97.9.219:443
216.238.71.31:995
207.246.112.221:443
207.246.112.221:995
216.238.72.121:995
216.238.71.31:443
65.100.174.110:8443
80.6.192.58:443
176.24.150.197:443
102.65.38.67:443
27.223.92.142:995
24.229.150.54:995
68.204.7.158:443
117.198.149.221:443
86.148.6.51:443
73.140.38.124:443
96.37.113.36:993
217.165.7.254:995
27.5.4.111:2222
197.89.144.207:443
-
salt
jHxastDcds)oMc=jvh7wdUhxcsdt2
Targets
-
-
Target
5b3d7ff4aab40fbaed4a1109a88a88f2583314718c5cc5eb37a7f219d61a1b53
-
Size
512KB
-
MD5
13dd38ab50726f4fe35fef1cdd2bac40
-
SHA1
4b1ae77144cc52db8d9bd9502d635d8eafaee563
-
SHA256
5b3d7ff4aab40fbaed4a1109a88a88f2583314718c5cc5eb37a7f219d61a1b53
-
SHA512
361d45f9aaa85eb387f2e64bad1d2868a6635f851b1e4e15e79a5bfbfd15f7243ae1783ba06f2e2f6ebd2a0e425bbda0b774a10d4a117970c277d3a75d6e9359
-
Loads dropped DLL
-