General
-
Target
entity.exe
-
Size
743KB
-
Sample
221006-pk6hsshch6
-
MD5
a4574766c6020e063adec6f949561411
-
SHA1
b617f5697975184d461f4bf9f17ca98dba2bb40e
-
SHA256
e6086eb622b42e6f6274d98d9c3ee0912645bbcd96e3e35e32dcb01d4b3cc6f6
-
SHA512
baa14e381abf4422b2bde7de8d508b802ed2eafbc2f060697eedd8677540fa3dc03eebd61a678e4508ed2d1eeadea899eebb9e9d8cb974bf6c5ef0dc4dc2c9d4
-
SSDEEP
12288:zxnt9hlMvNICAY0KEkAOl7G79SEXjGOyw3MW:tt9+JFEkAmG3j26M
Malware Config
Extracted
qakbot
156.36.22.250:12263
73.225.210.175:40922
19.138.81.187:38748
191.101.43.136:10968
145.20.244.169:39814
74.30.254.35:15530
138.94.26.23:49965
218.175.98.133:15428
181.245.40.43:1982
24.10.174.212:30807
253.219.195.173:1546
51.182.7.163:21304
191.68.117.56:28754
246.29.132.217:16625
149.181.112.217:33637
136.20.21.112:41199
80.65.15.199:35765
0.222.227.111:63041
209.240.1.52:53226
66.57.60.202:19263
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
entity.exe
-
Size
743KB
-
MD5
a4574766c6020e063adec6f949561411
-
SHA1
b617f5697975184d461f4bf9f17ca98dba2bb40e
-
SHA256
e6086eb622b42e6f6274d98d9c3ee0912645bbcd96e3e35e32dcb01d4b3cc6f6
-
SHA512
baa14e381abf4422b2bde7de8d508b802ed2eafbc2f060697eedd8677540fa3dc03eebd61a678e4508ed2d1eeadea899eebb9e9d8cb974bf6c5ef0dc4dc2c9d4
-
SSDEEP
12288:zxnt9hlMvNICAY0KEkAOl7G79SEXjGOyw3MW:tt9+JFEkAmG3j26M
Score10/10-
Qakbot/Qbot
Qbot or Qakbot is a sophisticated worm with banking capabilities.
-