General
-
Target
cen2.ocx
-
Size
548KB
-
Sample
220126-tg9hhafdg7
-
MD5
cdf2f67da070011199619b416313b5e2
-
SHA1
26cc2a49e1ae9ce7ec5409fed7c038f400e6cea5
-
SHA256
46bd2213e2303b3281cc3aa5fd571320ee15a6ad38b438fe6f85eb4213c1dd5f
-
SHA512
ad4e980b1ea7d45ba045a99587801639775538b804ba41cedf407413d5b21f9dc86ca3e33fbbe8d67e139c320a31043d83f5392bea1cd88e39d6b6d7ade1cce3
Static task
static1
Behavioral task
behavioral1
Sample
cen2.dll
Resource
win7-en-20211208
Malware Config
Extracted
qakbot
403.10
tr
1643025272
103.143.8.71:6881
37.210.172.200:2222
136.143.11.232:443
190.73.3.148:2222
78.101.147.76:61202
82.152.39.39:443
65.100.174.110:995
65.100.174.110:443
111.125.245.116:995
117.248.109.38:21
31.215.99.178:443
103.142.10.177:443
39.49.110.129:995
86.97.246.244:1194
68.204.7.158:443
217.128.93.27:2222
144.86.28.125:443
94.59.253.222:2222
120.150.218.241:995
185.249.85.209:443
69.14.172.24:443
94.200.181.154:995
182.191.92.203:995
24.95.61.62:443
86.97.246.244:2222
89.137.52.44:443
70.163.1.219:443
220.255.25.1:2222
24.178.196.158:2222
103.139.242.30:993
96.80.109.57:995
209.210.95.228:32100
180.233.150.134:995
149.135.101.20:443
38.70.253.226:2222
24.222.20.254:443
83.110.2.97:443
78.87.44.54:995
86.108.46.251:443
74.15.2.252:2222
102.65.38.67:443
37.203.225.248:443
75.139.7.190:2083
24.53.49.240:443
80.14.196.176:2222
94.60.254.81:443
86.98.32.228:443
130.164.129.3:443
176.67.56.94:443
31.167.160.170:443
31.35.28.29:443
32.221.231.1:443
71.74.12.34:443
96.21.251.127:2222
41.86.42.158:995
41.228.22.180:443
93.48.80.198:995
45.9.20.200:443
86.98.47.119:61200
96.246.158.154:995
89.114.156.182:995
67.209.195.198:443
75.156.151.34:443
89.101.97.139:443
182.56.101.61:443
128.106.122.39:443
31.215.226.115:2222
76.25.142.196:443
173.21.10.71:2222
142.186.63.108:2222
60.54.102.15:443
73.151.236.31:443
73.136.32.202:443
5.32.41.46:443
78.180.191.206:995
109.12.111.14:443
40.134.247.125:995
31.215.99.6:443
217.164.76.107:2078
80.6.192.58:443
63.143.92.99:995
27.5.4.194:2078
86.133.23.70:443
116.86.26.140:995
90.8.56.248:2222
101.50.120.112:995
67.165.206.193:993
100.1.119.41:443
31.215.29.238:443
186.64.87.207:443
190.206.211.182:443
218.101.110.3:995
103.139.242.30:990
136.232.34.70:443
73.67.152.98:2222
47.158.25.67:443
187.189.86.168:443
72.252.201.34:995
72.252.201.34:990
70.51.153.245:2222
108.4.67.252:443
70.45.174.173:443
72.252.201.34:993
217.165.109.189:32101
114.79.148.170:443
197.89.105.165:443
182.176.180.73:443
75.188.35.168:443
27.223.92.142:995
200.75.131.234:443
71.163.110.53:995
75.168.192.223:2222
107.77.232.51:443
201.172.31.135:80
83.110.98.231:995
96.37.113.36:993
78.191.27.236:995
78.96.235.245:443
23.229.117.237:443
91.185.131.89:61202
76.169.147.192:32103
114.143.84.25:61202
92.98.33.251:995
23.233.146.92:443
75.169.58.229:32100
184.100.174.73:443
50.237.134.22:995
36.234.184.238:995
65.100.174.110:8443
59.12.216.39:443
103.139.242.30:22
190.45.79.111:443
176.24.150.197:443
106.51.48.170:50001
111.119.252.178:995
73.59.201.174:443
-
salt
jHxastDcds)oMc=jvh7wdUhxcsdt2
Targets
-
-
Target
cen2.ocx
-
Size
548KB
-
MD5
cdf2f67da070011199619b416313b5e2
-
SHA1
26cc2a49e1ae9ce7ec5409fed7c038f400e6cea5
-
SHA256
46bd2213e2303b3281cc3aa5fd571320ee15a6ad38b438fe6f85eb4213c1dd5f
-
SHA512
ad4e980b1ea7d45ba045a99587801639775538b804ba41cedf407413d5b21f9dc86ca3e33fbbe8d67e139c320a31043d83f5392bea1cd88e39d6b6d7ade1cce3
-
Loads dropped DLL
-