General
- Target xxviii.dat.dll
- Size 696KB
- Sample221003-1d62jagdgr
- SHA256 ee334c9cc092acc0ba59caa04044b54ffe56bbdae54c74a561f837584cc08b1c
- MD5 3d48534dfce5e3ae8b4282a9b80d636c
- SHA1 8083d6bfed227cb4b876415347d9b620a2ec617e
- SHA512 f16ffe478d42cdaa649f1d63858e16bed986c2bee05aa127aba8a2c130e3672c349d23f17635c508257f21c103590582df19a79e72fad17c7b7abe467aa1d544
- SSDEEP 12288:gjLgntY7WZZdud9vUsdopaJm08L+CbbDy+SsF:gHx8sd9MsdcaJm0o1bPy+SsF
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
xxviii.dat.dll
Resource
win7-20220901-en
Malware Config
Extracted
-
qakbot
-
99.221.33.122:35602
-
29.202.180.222:51620
-
23.94.40.182:4331
-
34.19.16.166:1288
-
241.163.135.223:50051
-
32.107.156.85:19172
-
228.49.142.11:64889
-
196.202.140.31:7400
-
110.114.87.194:23019
-
217.188.119.28:9613
-
29.44.169.79:27952
-
169.83.63.109:46511
-
47.65.80.200:49855
-
50.140.194.100:14738
-
152.64.159.219:41214
-
12.255.117.222:36282
-
199.246.11.177:40851
-
81.180.116.241:1057
-
87.3.215.226:21496
-
247.44.83.206:32161
-
110.141.155.115:21355
-
126.7.15.81:38878
-
246.166.147.15:42079
-
71.118.48.68:16876
-
240.237.58.79:52135
-
228.135.88.101:8170
-
37.13.235.189:18671
-
187.156.210.204:4243
-
146.54.170.64:61188
-
240.132.30.162:19966
-
23.207.217.71:260
-
125.250.215.162:30167
-
242.193.131.8:56589
-
188.7.186.109:6729
-
80.147.52.103:32403
-
232.222.181.12:36938
-
165.107.195.136:37237
-
193.129.246.98:0
-
162.224.55.111:30915
-
17.105.54.14:63284
-
149.253.253.235:19955
-
148.219.182.10:5489
-
56.214.171.2:7637
-
171.182.161.115:60821
-
175.2.110.61:49611
-
99.130.91.79:29604
-
136.197.36.254:0
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
- Target xxviii.dat.dll
- Size 696KB
- SHA256 ee334c9cc092acc0ba59caa04044b54ffe56bbdae54c74a561f837584cc08b1c
- MD5 3d48534dfce5e3ae8b4282a9b80d636c
- SHA1 8083d6bfed227cb4b876415347d9b620a2ec617e
- SHA512 f16ffe478d42cdaa649f1d63858e16bed986c2bee05aa127aba8a2c130e3672c349d23f17635c508257f21c103590582df19a79e72fad17c7b7abe467aa1d544
- SSDEEP 12288:gjLgntY7WZZdud9vUsdopaJm08L+CbbDy+SsF:gHx8sd9MsdcaJm0o1bPy+SsF
- MD5 SHA1 SHA512 SSDEEP