General
-
Target
1988-58-0x00000000008B0000-0x00000000008D2000-memory.dmp
-
Size
136KB
-
Sample
220908-phw7caeeg5
-
MD5
d3c9033085631f091c79ffe93e4521fc
-
SHA1
a153a63ae80f45a7639770bcc8e5bd92a43ff502
-
SHA256
187570073544ada10dff94724a1f76c2565232d0a2c0448ee18fcdbe204d3010
-
SHA512
2404bcd095bd5fa2b7ca4c0ad95ed808bef5344fb36e9aaefaa7fd968115ada6348188521f8b56fb92fc239d590006a0d6467971cd02b41b4c11287870d42fd1
-
SSDEEP
3072:usYXmPYG7NsZBkWs2ksvAT5JZrdRoTBf1P8aFA+:8OYG7kBRs2lY9JpdRoTBtEIZ
Behavioral task
behavioral1
Sample
1988-58-0x00000000008B0000-0x00000000008D2000-memory.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1988-58-0x00000000008B0000-0x00000000008D2000-memory.dll
Resource
win10v2004-20220901-en
Malware Config
Extracted
qakbot
403.858
snow01
1662453469
200.161.62.126:32101
217.165.68.122:993
99.232.140.205:2222
81.131.161.131:2078
89.211.179.14:2222
186.64.87.202:443
197.94.210.133:443
193.3.19.37:443
37.210.148.30:995
200.100.55.252:32101
70.51.153.182:2222
120.150.218.241:995
173.189.167.21:995
24.139.72.117:443
104.34.212.7:32103
47.23.89.61:995
24.55.67.176:443
172.115.177.204:2222
217.165.77.134:995
24.178.196.158:2222
67.209.195.198:443
111.125.245.116:995
39.49.67.4:995
78.101.202.75:50010
37.34.253.233:443
217.165.77.134:443
46.107.48.202:443
70.46.220.114:443
63.143.92.99:995
93.48.80.198:995
179.158.103.236:443
47.180.172.159:443
47.23.89.61:993
72.252.157.93:995
182.191.92.203:995
187.172.230.151:443
72.252.157.93:990
24.158.23.166:995
32.221.224.140:995
41.84.238.19:443
41.228.22.180:443
197.167.27.20:993
45.46.53.140:2222
47.156.129.52:443
148.64.96.100:443
63.143.92.99:443
173.21.10.71:2222
66.230.104.103:443
76.25.142.196:443
100.38.242.113:995
208.107.221.224:443
197.89.12.179:443
39.44.34.119:995
196.203.37.215:80
39.57.40.50:995
117.248.109.38:21
121.7.223.38:2222
85.104.122.231:443
118.172.249.102:443
1.161.70.129:443
39.52.28.146:995
188.136.218.20:61202
212.70.96.76:995
1.161.70.129:995
174.69.215.101:443
69.14.172.24:443
86.213.191.206:2078
176.45.233.14:995
82.41.63.217:443
67.69.166.79:2222
217.164.237.54:2222
217.164.121.130:1194
39.41.114.133:995
100.38.242.113:443
120.61.3.17:443
101.50.120.124:995
217.128.122.65:2222
217.128.122.65:443
88.227.46.238:443
223.229.136.61:443
72.252.157.93:993
76.185.151.214:443
2.34.12.8:443
157.51.47.233:50001
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
1988-58-0x00000000008B0000-0x00000000008D2000-memory.dmp
-
Size
136KB
-
MD5
d3c9033085631f091c79ffe93e4521fc
-
SHA1
a153a63ae80f45a7639770bcc8e5bd92a43ff502
-
SHA256
187570073544ada10dff94724a1f76c2565232d0a2c0448ee18fcdbe204d3010
-
SHA512
2404bcd095bd5fa2b7ca4c0ad95ed808bef5344fb36e9aaefaa7fd968115ada6348188521f8b56fb92fc239d590006a0d6467971cd02b41b4c11287870d42fd1
-
SSDEEP
3072:usYXmPYG7NsZBkWs2ksvAT5JZrdRoTBf1P8aFA+:8OYG7kBRs2lY9JpdRoTBtEIZ
Score1/10 -