General
-
Target
c0fc5b84ba671a26027bddbd7a987eacc5917bdd1359cc1e72b754ba3517e805.dll
-
Size
593KB
-
Sample
221116-qtmygsba72
-
MD5
6ee4c290dcd0ed06802223fdf557f5d8
-
SHA1
f5fa5ca16ff0d9574b7030c27933fe8ff0e0f3c6
-
SHA256
c0fc5b84ba671a26027bddbd7a987eacc5917bdd1359cc1e72b754ba3517e805
-
SHA512
a104865030f9b4aac30a7f4b7ebe312bdff2b027654c8483a741336cf8f2e28df4ac371ef69cede766e5527f5c2360fd0a68f2ec2eca8c55feea32c6c5b14405
-
SSDEEP
12288:GnbfdUgz1clr4FgZMsAn68cUMwvLVh5VPnbf3:GbfdUggA68vMsL5db3
Static task
static1
Behavioral task
behavioral1
Sample
c0fc5b84ba671a26027bddbd7a987eacc5917bdd1359cc1e72b754ba3517e805.dll
Resource
win7-20220812-en
Malware Config
Extracted
qakbot
404.27
obama221
1667915095
199.83.165.233:443
24.142.218.202:443
79.166.120.168:995
92.24.200.226:995
151.32.168.124:443
72.88.245.71:443
46.229.194.17:443
142.119.40.220:2222
177.205.114.49:2222
174.104.184.149:443
86.167.26.227:2222
94.15.58.251:443
82.155.111.187:443
2.84.98.228:2222
69.133.162.35:443
92.189.214.236:2222
190.74.23.139:443
47.34.30.133:443
80.103.77.44:2222
82.34.170.37:443
200.233.108.153:995
2.83.62.105:443
93.164.248.234:443
92.191.49.255:2222
88.152.182.39:443
74.33.84.227:443
190.11.198.68:443
64.207.237.118:443
95.94.33.189:2222
24.64.114.59:2222
85.241.180.94:443
72.53.103.56:443
58.162.223.233:443
94.60.141.48:995
184.153.132.82:443
108.44.207.232:443
80.13.179.151:2222
46.190.93.247:50000
92.27.86.48:2222
78.253.154.211:50000
70.95.236.129:443
92.106.70.62:2222
109.11.175.42:2222
91.180.68.95:2222
86.129.13.178:2222
76.68.34.167:2222
201.192.179.221:443
45.49.137.80:443
144.202.15.58:443
105.184.161.175:443
94.63.65.146:443
64.121.161.102:443
105.103.33.225:993
86.225.214.138:2222
2.98.146.106:995
80.233.87.78:995
66.180.227.170:2222
95.214.107.21:443
85.241.105.6:443
90.78.85.59:2222
92.207.132.174:2222
73.36.196.11:443
50.68.204.71:443
87.223.83.164:443
188.127.169.210:443
190.24.45.24:995
62.31.130.138:465
109.218.233.44:2222
142.161.27.232:2222
105.103.33.225:995
109.149.147.221:2222
82.121.237.106:2222
174.77.209.5:443
98.145.23.67:443
88.126.94.4:50000
200.84.201.101:993
41.99.249.38:443
139.216.164.122:443
73.230.28.7:443
105.103.33.225:32103
50.68.204.71:995
75.156.125.215:995
24.206.27.39:443
193.3.19.137:443
212.251.122.147:995
92.137.74.174:2222
50.68.204.71:993
86.45.66.141:2222
176.142.207.63:443
46.177.99.230:995
87.202.101.164:50000
37.128.17.176:2222
176.137.187.206:995
61.92.123.169:443
213.67.255.57:2222
75.99.125.238:2222
24.49.232.96:443
157.231.42.190:443
73.165.119.20:443
79.37.204.67:443
190.36.189.154:2222
178.169.196.115:443
125.27.3.221:995
77.126.81.208:443
174.58.146.57:443
79.169.119.144:2222
74.92.243.113:995
60.48.250.151:2222
178.147.24.70:995
92.149.205.238:2222
174.45.15.123:443
89.216.114.163:443
80.189.213.49:2222
86.158.3.195:443
90.104.22.28:2222
72.133.240.122:2083
105.103.33.225:990
84.35.26.14:995
200.44.208.217:2222
50.37.154.115:443
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
c0fc5b84ba671a26027bddbd7a987eacc5917bdd1359cc1e72b754ba3517e805.dll
-
Size
593KB
-
MD5
6ee4c290dcd0ed06802223fdf557f5d8
-
SHA1
f5fa5ca16ff0d9574b7030c27933fe8ff0e0f3c6
-
SHA256
c0fc5b84ba671a26027bddbd7a987eacc5917bdd1359cc1e72b754ba3517e805
-
SHA512
a104865030f9b4aac30a7f4b7ebe312bdff2b027654c8483a741336cf8f2e28df4ac371ef69cede766e5527f5c2360fd0a68f2ec2eca8c55feea32c6c5b14405
-
SSDEEP
12288:GnbfdUgz1clr4FgZMsAn68cUMwvLVh5VPnbf3:GbfdUggA68vMsL5db3
-