General
-
Target
9d11c4cc1c69a7673bca3e0f74b9b1846900a5a7cfa39b66e96bf16e452a26e9
-
Size
2.2MB
-
Sample
220205-phjagsbca7
-
MD5
bdd35046904eddd00f03acd7e921fbd1
-
SHA1
8fce752a88b6cb93fe6463ed0d0823bbd568fa29
-
SHA256
9d11c4cc1c69a7673bca3e0f74b9b1846900a5a7cfa39b66e96bf16e452a26e9
-
SHA512
03df82f5287de7d9e6a94dc6d83f68f1f83c1236774fbe57e85d0066bddf6145e5041d8ca1aa516d158410844188b9194756be187af37a7d8ae0c0524a69e273
Behavioral task
behavioral1
Sample
9d11c4cc1c69a7673bca3e0f74b9b1846900a5a7cfa39b66e96bf16e452a26e9.exe
Resource
win7-en-20211208
Malware Config
Extracted
qakbot
324.127
spx95
1586782660
47.153.115.154:443
108.27.217.44:443
71.77.252.14:2222
64.19.74.29:995
186.135.93.204:443
96.236.225.10:443
24.37.178.158:443
68.59.27.48:443
76.170.77.99:443
206.183.190.53:995
47.136.224.60:443
68.174.15.223:443
108.188.46.240:995
72.29.181.77:2078
50.29.181.193:995
69.92.54.95:995
47.180.66.10:443
86.125.138.141:995
184.180.157.203:2222
78.96.148.177:443
137.99.224.198:443
174.60.164.63:443
67.250.184.157:443
206.169.163.147:995
62.121.78.22:443
74.33.70.30:443
23.240.76.67:443
199.241.223.66:443
69.246.151.5:443
72.214.55.147:995
98.118.156.172:443
31.5.189.71:443
24.27.82.216:2222
120.147.67.62:2222
24.46.40.189:2222
85.154.168.118:443
73.214.231.2:443
94.52.124.226:443
5.182.39.156:443
75.87.220.217:443
67.131.59.17:443
24.201.79.208:2078
71.11.209.101:443
75.90.238.41:443
152.32.80.37:443
187.19.151.218:995
68.39.177.147:995
95.76.27.89:443
72.198.57.202:443
185.145.113.249:443
79.113.193.29:443
72.78.198.100:443
66.26.160.37:443
81.103.144.77:443
216.16.178.115:443
71.58.21.235:443
31.5.205.122:443
74.135.85.117:443
75.121.14.168:443
71.77.231.251:443
24.228.7.174:443
50.104.67.101:443
189.157.37.193:995
94.52.151.23:443
66.44.96.184:443
190.79.43.28:2078
79.114.194.106:443
72.36.59.46:2222
50.247.230.33:995
79.118.24.233:443
173.175.29.210:443
66.208.105.6:443
70.124.29.226:443
81.245.66.237:995
74.134.35.54:443
68.204.164.222:443
72.183.129.56:443
86.121.197.61:443
96.57.237.162:443
86.126.126.75:443
86.124.7.64:443
72.80.137.215:443
73.126.67.69:443
68.82.125.234:443
79.127.65.15:995
84.247.55.190:443
76.187.8.160:443
79.115.211.4:2222
73.163.242.114:443
108.30.161.143:443
89.43.136.239:443
50.244.112.10:443
217.162.149.212:443
188.25.237.208:443
24.55.152.50:995
188.24.14.18:443
72.218.22.112:443
24.37.178.158:990
96.227.97.103:443
212.126.109.14:443
71.74.12.34:443
108.34.131.96:443
37.105.82.82:443
71.29.21.50:443
72.190.101.70:443
24.110.14.40:443
100.4.185.8:443
47.153.115.154:993
188.240.233.107:995
5.14.118.122:443
12.5.37.3:443
85.7.22.186:2222
216.163.4.91:443
72.132.249.144:995
74.75.237.11:443
35.142.24.147:2222
72.172.49.164:443
68.1.171.93:443
47.202.98.230:443
5.2.149.216:443
24.168.237.215:443
156.96.45.215:443
98.243.187.85:443
108.49.221.180:443
98.173.34.212:995
98.213.28.175:443
47.40.244.237:443
39.50.255.85:995
75.183.171.155:3389
173.197.155.139:443
108.190.151.108:2222
99.228.40.243:443
86.99.55.241:443
74.65.69.57:0
208.93.202.49:443
73.144.30.70:443
100.1.239.189:443
5.237.36.177:2222
98.199.150.30:443
24.32.119.146:443
35.143.248.234:443
72.224.213.98:2222
24.110.96.149:443
71.187.170.235:443
77.159.149.74:443
70.95.94.91:2078
78.97.119.189:443
107.2.148.99:443
173.79.220.156:443
46.214.138.212:443
Targets
-
-
Target
9d11c4cc1c69a7673bca3e0f74b9b1846900a5a7cfa39b66e96bf16e452a26e9
-
Size
2.2MB
-
MD5
bdd35046904eddd00f03acd7e921fbd1
-
SHA1
8fce752a88b6cb93fe6463ed0d0823bbd568fa29
-
SHA256
9d11c4cc1c69a7673bca3e0f74b9b1846900a5a7cfa39b66e96bf16e452a26e9
-
SHA512
03df82f5287de7d9e6a94dc6d83f68f1f83c1236774fbe57e85d0066bddf6145e5041d8ca1aa516d158410844188b9194756be187af37a7d8ae0c0524a69e273
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-