General
-
Target
2d0000.dll
-
Size
168KB
-
Sample
221116-13ch8ahb4x
-
MD5
393fc5e3487fd2623a8da04b7045a94c
-
SHA1
15e7d42be1e1791ace16b5af6ddcf494b25222bb
-
SHA256
e285192bb507aec08c42a4d7c85747e2fb13dc0816953d89fd648060880cba90
-
SHA512
e9e6508ce2ffecedd3b5a963af12b1758c1710b13d2c315c060529df026204384643f9bdc498bc2340eff614a541200c72d0db25cbcda97a74eeb044923d1ed2
-
SSDEEP
3072:Nwgk0u7Y87D5fghExoUAiJGizMHTBfZ4gJpO/yafaY:e/P2hExoBiJHzMHTBR4OA/
Behavioral task
behavioral1
Sample
2d0000.dll
Resource
win7-20221111-en
Malware Config
Extracted
qakbot
404.27
obama221
1667915095
199.83.165.233:443
24.142.218.202:443
79.166.120.168:995
92.24.200.226:995
151.32.168.124:443
72.88.245.71:443
46.229.194.17:443
142.119.40.220:2222
177.205.114.49:2222
174.104.184.149:443
86.167.26.227:2222
94.15.58.251:443
82.155.111.187:443
2.84.98.228:2222
69.133.162.35:443
92.189.214.236:2222
190.74.23.139:443
47.34.30.133:443
80.103.77.44:2222
82.34.170.37:443
200.233.108.153:995
2.83.62.105:443
93.164.248.234:443
92.191.49.255:2222
88.152.182.39:443
74.33.84.227:443
190.11.198.68:443
64.207.237.118:443
95.94.33.189:2222
24.64.114.59:2222
85.241.180.94:443
72.53.103.56:443
58.162.223.233:443
94.60.141.48:995
184.153.132.82:443
108.44.207.232:443
80.13.179.151:2222
46.190.93.247:50000
92.27.86.48:2222
78.253.154.211:50000
70.95.236.129:443
92.106.70.62:2222
109.11.175.42:2222
91.180.68.95:2222
86.129.13.178:2222
76.68.34.167:2222
201.192.179.221:443
45.49.137.80:443
144.202.15.58:443
105.184.161.175:443
94.63.65.146:443
64.121.161.102:443
105.103.33.225:993
86.225.214.138:2222
2.98.146.106:995
80.233.87.78:995
66.180.227.170:2222
95.214.107.21:443
85.241.105.6:443
90.78.85.59:2222
92.207.132.174:2222
73.36.196.11:443
50.68.204.71:443
87.223.83.164:443
188.127.169.210:443
190.24.45.24:995
62.31.130.138:465
109.218.233.44:2222
142.161.27.232:2222
105.103.33.225:995
109.149.147.221:2222
82.121.237.106:2222
174.77.209.5:443
98.145.23.67:443
88.126.94.4:50000
200.84.201.101:993
41.99.249.38:443
139.216.164.122:443
73.230.28.7:443
105.103.33.225:32103
50.68.204.71:995
75.156.125.215:995
24.206.27.39:443
193.3.19.137:443
212.251.122.147:995
92.137.74.174:2222
50.68.204.71:993
86.45.66.141:2222
176.142.207.63:443
46.177.99.230:995
87.202.101.164:50000
37.128.17.176:2222
176.137.187.206:995
61.92.123.169:443
213.67.255.57:2222
75.99.125.238:2222
24.49.232.96:443
157.231.42.190:443
73.165.119.20:443
79.37.204.67:443
190.36.189.154:2222
178.169.196.115:443
125.27.3.221:995
77.126.81.208:443
174.58.146.57:443
79.169.119.144:2222
74.92.243.113:995
60.48.250.151:2222
178.147.24.70:995
92.149.205.238:2222
174.45.15.123:443
89.216.114.163:443
80.189.213.49:2222
86.158.3.195:443
90.104.22.28:2222
72.133.240.122:2083
105.103.33.225:990
84.35.26.14:995
200.44.208.217:2222
50.37.154.115:443
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
2d0000.dll
-
Size
168KB
-
MD5
393fc5e3487fd2623a8da04b7045a94c
-
SHA1
15e7d42be1e1791ace16b5af6ddcf494b25222bb
-
SHA256
e285192bb507aec08c42a4d7c85747e2fb13dc0816953d89fd648060880cba90
-
SHA512
e9e6508ce2ffecedd3b5a963af12b1758c1710b13d2c315c060529df026204384643f9bdc498bc2340eff614a541200c72d0db25cbcda97a74eeb044923d1ed2
-
SSDEEP
3072:Nwgk0u7Y87D5fghExoUAiJGizMHTBfZ4gJpO/yafaY:e/P2hExoBiJHzMHTBR4OA/
-