General
-
Target
kaleidoscope.tmp.dll
-
Size
528KB
-
Sample
221118-g7rn6agg62
-
MD5
7d3c7803b0c08b9c23a918fe9bf1ac6c
-
SHA1
b3e5ceb0bf9c3d10e626a448afb3d06f01d6b57c
-
SHA256
a4bd3e694fee912bc8871b3da9302e5608b2c69e6ca1ab99bd726ccc6923edc1
-
SHA512
6831ff00ba9e6ba1534faab19bb79a34e52f7e16753821b8bb4fd2c7cf372856b4639ee0683d5ca522a0d42b1ea76cd34119b8f370e7415e661ba13756d6b921
-
SSDEEP
12288:Sx4YGJ7FVsr0DUESxof9TQGWCIQ1HvhL3iL/wXLK:Sx4Yk7A4DUESx69MuI4vhL3tX
Static task
static1
Behavioral task
behavioral1
Sample
kaleidoscope.tmp.dll
Resource
win7-20221111-en
Malware Config
Extracted
qakbot
404.30
BB06
1668610672
87.243.146.59:443
90.104.22.28:2222
200.93.14.206:2222
86.171.75.63:443
92.185.204.18:2078
86.225.214.138:2222
152.170.17.136:443
92.27.86.48:2222
76.80.180.154:995
71.31.101.183:443
91.254.215.167:443
73.22.121.210:443
87.202.101.164:50000
24.228.132.224:2222
70.121.198.103:2078
186.28.85.119:995
193.251.52.34:2222
98.211.64.94:443
172.117.139.142:995
70.51.153.72:2222
88.152.182.39:443
75.191.246.70:443
109.11.175.42:2222
76.20.42.45:443
213.67.255.57:2222
142.161.27.232:2222
212.251.122.147:995
108.6.249.139:443
90.162.45.154:2222
72.82.136.90:443
47.34.30.133:443
45.62.78.1:443
197.148.17.17:2078
89.115.196.99:443
90.4.98.190:2222
92.207.132.174:2222
86.217.250.15:2222
105.184.161.242:443
86.195.32.149:2222
73.36.196.11:443
197.26.174.95:443
105.103.50.1:2078
24.116.45.121:443
90.221.5.105:443
105.103.50.1:22
184.153.132.82:443
74.66.134.24:443
142.119.40.220:2222
188.92.64.68:443
109.145.27.139:443
24.64.114.59:3389
47.6.225.229:443
176.151.15.101:443
24.64.114.59:2222
82.34.170.37:443
66.191.69.18:995
62.31.130.138:465
80.103.77.44:2222
37.14.229.220:2222
98.30.233.14:443
177.205.92.100:2222
71.67.96.151:443
89.152.120.181:443
82.9.210.36:443
73.230.28.7:443
77.129.205.124:995
182.66.197.35:443
85.74.158.150:2222
76.127.192.23:443
50.68.204.71:443
199.83.165.233:443
85.59.61.52:2222
174.77.209.5:443
157.231.42.190:443
80.121.8.212:995
93.164.248.234:443
50.68.204.71:995
87.223.80.45:443
91.180.68.95:2222
190.24.45.24:995
190.75.110.239:443
105.105.232.103:995
72.88.245.71:443
61.92.123.169:443
197.14.218.253:443
213.91.235.146:443
47.16.73.77:2222
200.233.108.153:995
187.199.224.16:32103
98.145.23.67:443
75.99.125.238:2222
79.37.204.67:443
183.82.100.110:2222
181.118.183.116:443
77.126.81.208:443
80.189.213.49:2222
92.106.70.62:2222
82.121.73.56:2222
170.249.59.153:443
99.253.103.210:443
65.190.156.10:443
173.239.94.212:443
2.99.47.198:2222
86.165.15.180:2222
83.7.53.150:443
62.35.67.88:443
75.156.125.215:995
174.45.15.123:443
172.90.139.138:2222
75.143.236.149:443
86.176.144.225:2222
75.98.154.19:443
173.18.126.3:443
85.241.180.94:443
74.92.243.113:50000
177.46.111.176:995
105.103.50.1:32103
121.122.99.151:995
88.126.94.4:50000
174.104.184.149:443
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
kaleidoscope.tmp.dll
-
Size
528KB
-
MD5
7d3c7803b0c08b9c23a918fe9bf1ac6c
-
SHA1
b3e5ceb0bf9c3d10e626a448afb3d06f01d6b57c
-
SHA256
a4bd3e694fee912bc8871b3da9302e5608b2c69e6ca1ab99bd726ccc6923edc1
-
SHA512
6831ff00ba9e6ba1534faab19bb79a34e52f7e16753821b8bb4fd2c7cf372856b4639ee0683d5ca522a0d42b1ea76cd34119b8f370e7415e661ba13756d6b921
-
SSDEEP
12288:Sx4YGJ7FVsr0DUESxof9TQGWCIQ1HvhL3iL/wXLK:Sx4Yk7A4DUESx69MuI4vhL3tX
-