General
-
Target
8d58c29a45d8a94f3add1317a2d1c00e0d6eda898293a81952f5603967ce45ad
-
Size
708KB
-
Sample
220724-vbxgesbce9
-
MD5
d93db4daa650dcdc5ffe670d61fcfa8f
-
SHA1
3ed89771339ea3e6d0ea56d16aface69ddef4f74
-
SHA256
8d58c29a45d8a94f3add1317a2d1c00e0d6eda898293a81952f5603967ce45ad
-
SHA512
bb1ab6ef623db5f71573ddd23a7c1873fabfc87c6f4f181fd8c8328367457bffc99edbb28d1c51991b137a69794d0915b845d9fbea6ca54c1dd922e9a797dabd
Static task
static1
Behavioral task
behavioral1
Sample
8d58c29a45d8a94f3add1317a2d1c00e0d6eda898293a81952f5603967ce45ad.exe
Resource
win7-20220715-en
Malware Config
Extracted
qakbot
323.91
spx46
1576587820
32.208.1.239:8443
181.123.59.111:443
73.226.220.56:443
93.177.144.236:443
24.184.6.58:2222
72.16.212.107:465
162.244.224.166:443
62.47.252.79:993
67.10.18.112:993
104.235.119.20:443
72.224.159.224:2222
181.197.195.138:995
74.134.35.54:443
174.20.189.226:995
67.214.21.207:443
187.163.101.137:995
72.47.115.182:443
173.31.178.20:443
75.131.72.82:995
5.182.39.156:443
181.126.80.118:443
98.118.162.34:443
73.142.81.221:443
73.133.46.105:995
50.245.107.73:443
137.99.224.198:443
100.38.123.22:443
217.162.149.212:443
68.134.181.98:443
5.48.231.126:443
76.23.204.29:443
24.189.222.222:2222
23.240.185.215:443
106.51.148.162:443
47.185.43.243:443
47.187.133.183:443
47.40.244.237:443
138.122.5.214:443
66.169.209.201:443
67.141.21.18:443
184.4.192.200:443
190.158.208.149:443
73.179.178.78:443
108.45.183.59:443
116.58.100.130:443
75.177.91.92:443
83.110.153.83:443
68.49.120.179:443
108.190.148.31:2222
46.248.48.167:995
69.70.37.246:465
72.190.101.70:443
64.33.68.198:443
96.227.138.53:443
50.78.93.74:995
117.204.227.149:995
107.12.140.181:443
24.202.42.48:2222
184.167.2.251:2222
72.142.106.198:993
75.81.25.223:995
71.222.14.97:443
74.194.4.181:443
96.35.170.82:2222
173.172.205.216:443
24.201.79.208:2078
74.71.216.1:443
75.110.250.89:443
184.180.157.203:2222
162.244.225.30:443
65.30.12.240:443
74.33.70.219:443
68.100.248.78:443
75.142.59.167:443
24.91.26.212:443
201.152.209.215:995
66.90.149.186:443
108.55.23.221:443
70.177.25.99:443
98.237.120.65:995
47.227.198.155:443
183.83.97.60:443
72.29.181.77:2078
67.246.180.90:443
71.77.224.65:443
97.93.211.17:443
179.36.61.179:443
71.77.231.251:443
50.247.230.33:995
107.12.131.249:443
75.131.239.76:995
86.133.23.218:2222
63.230.16.166:995
47.153.115.154:995
166.62.180.194:2078
173.3.132.17:995
24.229.245.124:995
45.45.105.94:443
208.126.142.17:443
72.187.35.131:443
80.14.209.42:2222
75.90.230.120:995
130.93.11.211:995
130.93.11.211:443
83.76.204.98:2222
67.200.146.98:2222
47.214.144.253:443
97.96.51.117:443
88.111.224.103:2222
75.165.142.212:443
172.78.87.180:995
66.214.75.176:443
174.48.72.160:443
71.30.56.170:443
12.5.37.3:995
71.226.140.73:443
75.70.218.193:443
107.5.252.194:443
70.124.29.226:443
190.133.41.102:995
138.122.5.214:2222
67.246.16.250:995
108.160.123.244:443
64.19.74.29:995
78.13.212.163:2222
172.242.9.118:995
47.146.169.85:443
47.23.101.26:465
97.122.229.88:993
45.45.105.94:995
174.82.131.155:995
68.174.15.223:443
108.27.217.44:443
206.51.202.106:50002
207.5.138.66:0
66.44.125.165:443
24.32.119.146:443
108.227.161.27:443
100.4.185.8:443
70.120.151.69:443
108.46.22.47:443
173.22.120.11:2222
66.222.88.126:995
12.5.37.3:443
64.250.55.239:443
65.131.252.13:443
98.252.150.180:443
104.3.91.20:995
68.238.56.27:443
Targets
-
-
Target
8d58c29a45d8a94f3add1317a2d1c00e0d6eda898293a81952f5603967ce45ad
-
Size
708KB
-
MD5
d93db4daa650dcdc5ffe670d61fcfa8f
-
SHA1
3ed89771339ea3e6d0ea56d16aface69ddef4f74
-
SHA256
8d58c29a45d8a94f3add1317a2d1c00e0d6eda898293a81952f5603967ce45ad
-
SHA512
bb1ab6ef623db5f71573ddd23a7c1873fabfc87c6f4f181fd8c8328367457bffc99edbb28d1c51991b137a69794d0915b845d9fbea6ca54c1dd922e9a797dabd
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-