General
-
Target
c39a093c9ab94ccb3a2488f53cf31b083c97303930b9d432c1b678c9bf4c7f4f
-
Size
2.9MB
-
Sample
220324-lz1pbafdg6
-
MD5
6005c2b3c04d03539e666b89af287df5
-
SHA1
80dd1018d9552acd93dfdc88adf154ef7af21b73
-
SHA256
c39a093c9ab94ccb3a2488f53cf31b083c97303930b9d432c1b678c9bf4c7f4f
-
SHA512
fe4c4786e0479cb54e507a91a15de66ac700f2f0ecbb7fc9780623376d0675d28ac02b49fbf1fc8c1646b699d5a02b4b7586f15fc3b7d5cd1886f5bb8848988e
Behavioral task
behavioral1
Sample
c39a093c9ab94ccb3a2488f53cf31b083c97303930b9d432c1b678c9bf4c7f4f.dll
Resource
win7-20220311-en
Malware Config
Extracted
qakbot
401.29
abc101
1606331967
76.104.230.174:443
187.227.86.129:995
219.255.28.241:443
78.184.6.94:443
95.159.45.82:443
91.228.36.95:443
79.115.215.125:443
24.244.161.36:443
24.71.28.247:443
73.239.229.107:995
187.153.119.36:443
190.75.167.44:2222
83.110.111.159:443
174.76.21.134:443
75.109.180.221:443
85.122.141.42:995
156.222.6.246:995
188.24.183.193:443
88.106.237.152:2222
79.166.83.103:2222
74.73.27.35:443
200.140.154.174:2222
173.173.1.164:443
89.33.87.107:443
86.97.221.121:443
72.241.205.69:443
196.89.180.164:443
83.110.19.27:443
95.77.223.148:443
47.22.148.6:443
196.204.207.111:443
79.129.121.81:995
98.115.243.237:443
105.198.236.99:443
68.134.181.98:443
69.47.239.10:443
67.82.244.199:2222
2.51.246.190:995
200.75.136.78:443
79.119.20.151:443
31.46.48.119:443
2.86.41.23:2222
108.30.125.94:443
189.210.115.207:443
187.149.129.239:443
84.117.176.32:443
189.141.31.12:443
185.105.131.233:443
95.76.27.6:443
73.56.2.167:443
189.131.107.239:995
68.225.60.77:995
90.174.217.251:2222
68.116.193.239:443
73.166.10.38:995
98.26.50.62:995
95.77.144.238:443
98.4.227.199:443
201.170.194.40:995
174.29.203.226:993
120.150.218.241:995
85.204.189.105:443
67.6.54.180:443
5.15.225.109:443
98.240.24.57:443
216.201.162.158:443
173.197.22.90:2222
217.165.2.92:995
67.8.103.21:443
76.181.122.120:443
174.62.13.151:443
172.87.134.226:443
108.160.123.244:443
50.244.112.106:443
2.7.202.106:2222
187.136.203.196:443
190.220.8.10:995
89.136.39.108:443
24.138.77.61:443
187.213.136.249:995
73.166.10.38:443
85.60.132.8:2087
84.78.128.76:2078
146.199.132.233:2222
24.201.61.153:2078
189.250.115.177:2222
2.190.10.89:995
72.240.200.181:2222
172.114.116.226:995
72.190.101.70:443
109.209.94.165:2222
92.59.35.196:2083
37.107.82.136:443
174.76.11.123:995
72.252.201.69:443
172.116.85.178:443
72.29.181.78:2078
178.223.20.246:995
98.30.44.223:2222
189.231.173.158:443
39.32.125.15:995
185.138.134.150:443
105.198.236.101:443
5.14.152.241:443
149.28.98.196:2222
45.63.107.192:2222
208.93.202.41:443
45.77.193.83:443
93.177.172.131:443
149.28.98.196:443
45.63.107.192:995
5.107.34.225:22
98.199.189.220:61202
149.28.98.196:995
149.28.99.97:443
72.204.242.138:443
149.28.99.97:2222
50.244.112.90:443
182.48.138.42:443
69.123.179.70:443
90.101.62.189:2222
41.228.197.242:443
190.128.215.174:443
188.26.243.119:443
73.248.120.240:443
72.36.59.46:2222
24.152.219.253:995
189.172.247.56:443
199.19.117.131:443
89.137.211.239:443
37.116.152.122:2222
83.202.68.220:2222
216.215.77.18:2078
96.37.113.36:993
92.154.83.96:2222
73.55.254.225:443
24.122.0.90:443
68.192.50.231:443
86.218.67.235:2222
116.240.78.45:995
105.101.216.210:443
77.27.174.49:995
98.121.187.78:443
201.152.69.217:995
75.136.26.147:443
92.137.138.52:2222
71.182.142.63:443
178.87.29.72:443
75.136.40.155:443
201.152.196.4:443
-
salt
jHxastDcds)oMc=jvh7wdUhxcsdt2
Targets
-
-
Target
c39a093c9ab94ccb3a2488f53cf31b083c97303930b9d432c1b678c9bf4c7f4f
-
Size
2.9MB
-
MD5
6005c2b3c04d03539e666b89af287df5
-
SHA1
80dd1018d9552acd93dfdc88adf154ef7af21b73
-
SHA256
c39a093c9ab94ccb3a2488f53cf31b083c97303930b9d432c1b678c9bf4c7f4f
-
SHA512
fe4c4786e0479cb54e507a91a15de66ac700f2f0ecbb7fc9780623376d0675d28ac02b49fbf1fc8c1646b699d5a02b4b7586f15fc3b7d5cd1886f5bb8848988e
-
Loads dropped DLL
-