General
-
Target
548b97e6fae0e6415b1337ed947f3c54b80738223ac5036965c56bd95d5c6412
-
Size
2.1MB
-
Sample
220309-sy5p7saab4
-
MD5
2ac32bfa251a7608abeec8f116aafc4b
-
SHA1
6dd2017fff977d8c45a89393ff1ef50c71bd7bec
-
SHA256
548b97e6fae0e6415b1337ed947f3c54b80738223ac5036965c56bd95d5c6412
-
SHA512
85ba956699772c3f7c65e2e1719b8615f48dcfefb0eac24d11a8c532c0ec3e404edc1158c701b9b86f5ea06bdaf80bb5fc33609c25741dc54de0d3ebb0dc3a08
Malware Config
Extracted
qakbot
401.62
abc107
1607078484
32.212.117.188:443
109.205.204.229:2222
72.36.59.46:2222
173.18.126.193:2222
96.225.88.23:443
89.137.211.239:443
110.142.205.182:443
82.76.47.211:443
193.83.25.177:995
67.40.253.209:995
73.244.83.199:443
2.90.186.243:995
189.252.62.238:995
141.237.135.194:443
82.78.70.128:443
185.125.151.172:443
79.117.239.22:2222
86.189.252.131:2222
83.114.243.80:2222
2.50.56.81:443
-
salt
jHxastDcds)oMc=jvh7wdUhxcsdt2
Extracted
qakbot
-
salt
�<�,�6�1�2�3�0�2�3�2�3�2�3�2�3�2�3�2�3�2�3�2�3�2�5�2�5�2�5�2�5�2�5�2�5�2�5�2�5
Targets
-
-
Target
548b97e6fae0e6415b1337ed947f3c54b80738223ac5036965c56bd95d5c6412
-
Size
2.1MB
-
MD5
2ac32bfa251a7608abeec8f116aafc4b
-
SHA1
6dd2017fff977d8c45a89393ff1ef50c71bd7bec
-
SHA256
548b97e6fae0e6415b1337ed947f3c54b80738223ac5036965c56bd95d5c6412
-
SHA512
85ba956699772c3f7c65e2e1719b8615f48dcfefb0eac24d11a8c532c0ec3e404edc1158c701b9b86f5ea06bdaf80bb5fc33609c25741dc54de0d3ebb0dc3a08
Score10/10-
Qakbot/Qbot
Qbot or Qakbot is a sophisticated worm with banking capabilities.
-
Loads dropped DLL
-