General
-
Target
seekers.dat
-
Size
422KB
-
Sample
221102-nc2dfacbcj
-
MD5
96a90b421bff3fc5b9b95bf6454dbfd3
-
SHA1
089729abb4b1bfd757cf32c3a0c3acd7c1364d62
-
SHA256
9496c443c10d83485c6d963891d4776ef2b9f545199d491d754a52cbbda29ab5
-
SHA512
c3d554a552843462ed6c0d0f602dd78ef54cadc23cf53538a3538d105fe816385898d689b71f46d722228077207d236d5282cfa84261f7d3e4f122f2f2dc318d
-
SSDEEP
12288:j6kLJmoVzs/0jBC2KScv8F6y9GBWZ8+eU:jbJmIKd8aWS+r
Malware Config
Extracted
qakbot
404.20
BB05
1667294768
136.232.184.134:995
1.65.20.175:53249
187.0.1.154:63263
50.68.204.71:995
74.92.243.113:50000
1.149.126.159:57345
187.0.1.182:17093
123.3.240.16:995
76.68.34.167:2222
172.219.147.156:3389
94.49.5.116:443
187.0.1.181:14507
206.1.223.234:2087
187.0.1.186:18828
131.23.1.187:1
23.233.254.195:443
76.125.91.160:443
187.0.1.90:42349
70.51.139.148:2222
187.0.1.76:47526
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
seekers.dat
-
Size
422KB
-
MD5
96a90b421bff3fc5b9b95bf6454dbfd3
-
SHA1
089729abb4b1bfd757cf32c3a0c3acd7c1364d62
-
SHA256
9496c443c10d83485c6d963891d4776ef2b9f545199d491d754a52cbbda29ab5
-
SHA512
c3d554a552843462ed6c0d0f602dd78ef54cadc23cf53538a3538d105fe816385898d689b71f46d722228077207d236d5282cfa84261f7d3e4f122f2f2dc318d
-
SSDEEP
12288:j6kLJmoVzs/0jBC2KScv8F6y9GBWZ8+eU:jbJmIKd8aWS+r
Score10/10-
Qakbot/Qbot
Qbot or Qakbot is a sophisticated worm with banking capabilities.
-