General
-
Target
1516-57-0x00000000001C0000-0x00000000001EA000-memory.dmp
-
Size
168KB
-
Sample
221118-hdlrgscf7x
-
MD5
bff27e5f12020bb930823b34539c6461
-
SHA1
7e8e858e56991e6a8dc852a699c5070ec799948e
-
SHA256
5534d676266b12fd748c3b3ac9c77ee661e8f2ab6aa06ca77e69b872d05b3d06
-
SHA512
f6089a27afff68bd16d86e8b1743f75ce033d38fbc54490ef2449de5db31aea44c08ca948b267828e47f130169bd9d457856c21761035ea0993c3d8141e9c432
-
SSDEEP
3072:U4uOcRaqajLtA8bGVg+gAYJgGrrYTBf5Pva83J3O/yat:WazvC6GVg+VYJxrrYTBR683Je/
Behavioral task
behavioral1
Sample
1516-57-0x00000000001C0000-0x00000000001EA000-memory.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1516-57-0x00000000001C0000-0x00000000001EA000-memory.dll
Resource
win10v2004-20220812-en
Malware Config
Extracted
qakbot
404.30
BB06
1668610672
87.243.146.59:443
90.104.22.28:2222
200.93.14.206:2222
86.171.75.63:443
92.185.204.18:2078
86.225.214.138:2222
152.170.17.136:443
92.27.86.48:2222
76.80.180.154:995
71.31.101.183:443
91.254.215.167:443
73.22.121.210:443
87.202.101.164:50000
24.228.132.224:2222
70.121.198.103:2078
186.28.85.119:995
193.251.52.34:2222
98.211.64.94:443
172.117.139.142:995
70.51.153.72:2222
88.152.182.39:443
75.191.246.70:443
109.11.175.42:2222
76.20.42.45:443
213.67.255.57:2222
142.161.27.232:2222
212.251.122.147:995
108.6.249.139:443
90.162.45.154:2222
72.82.136.90:443
47.34.30.133:443
45.62.78.1:443
197.148.17.17:2078
89.115.196.99:443
90.4.98.190:2222
92.207.132.174:2222
86.217.250.15:2222
105.184.161.242:443
86.195.32.149:2222
73.36.196.11:443
197.26.174.95:443
105.103.50.1:2078
24.116.45.121:443
90.221.5.105:443
105.103.50.1:22
184.153.132.82:443
74.66.134.24:443
142.119.40.220:2222
188.92.64.68:443
109.145.27.139:443
24.64.114.59:3389
47.6.225.229:443
176.151.15.101:443
24.64.114.59:2222
82.34.170.37:443
66.191.69.18:995
62.31.130.138:465
80.103.77.44:2222
37.14.229.220:2222
98.30.233.14:443
177.205.92.100:2222
71.67.96.151:443
89.152.120.181:443
82.9.210.36:443
73.230.28.7:443
77.129.205.124:995
182.66.197.35:443
85.74.158.150:2222
76.127.192.23:443
50.68.204.71:443
199.83.165.233:443
85.59.61.52:2222
174.77.209.5:443
157.231.42.190:443
80.121.8.212:995
93.164.248.234:443
50.68.204.71:995
87.223.80.45:443
91.180.68.95:2222
190.24.45.24:995
190.75.110.239:443
105.105.232.103:995
72.88.245.71:443
61.92.123.169:443
197.14.218.253:443
213.91.235.146:443
47.16.73.77:2222
200.233.108.153:995
187.199.224.16:32103
98.145.23.67:443
75.99.125.238:2222
79.37.204.67:443
183.82.100.110:2222
181.118.183.116:443
77.126.81.208:443
80.189.213.49:2222
92.106.70.62:2222
82.121.73.56:2222
170.249.59.153:443
99.253.103.210:443
65.190.156.10:443
173.239.94.212:443
2.99.47.198:2222
86.165.15.180:2222
83.7.53.150:443
62.35.67.88:443
75.156.125.215:995
174.45.15.123:443
172.90.139.138:2222
75.143.236.149:443
86.176.144.225:2222
75.98.154.19:443
173.18.126.3:443
85.241.180.94:443
74.92.243.113:50000
177.46.111.176:995
105.103.50.1:32103
121.122.99.151:995
88.126.94.4:50000
174.104.184.149:443
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
1516-57-0x00000000001C0000-0x00000000001EA000-memory.dmp
-
Size
168KB
-
MD5
bff27e5f12020bb930823b34539c6461
-
SHA1
7e8e858e56991e6a8dc852a699c5070ec799948e
-
SHA256
5534d676266b12fd748c3b3ac9c77ee661e8f2ab6aa06ca77e69b872d05b3d06
-
SHA512
f6089a27afff68bd16d86e8b1743f75ce033d38fbc54490ef2449de5db31aea44c08ca948b267828e47f130169bd9d457856c21761035ea0993c3d8141e9c432
-
SSDEEP
3072:U4uOcRaqajLtA8bGVg+gAYJgGrrYTBf5Pva83J3O/yat:WazvC6GVg+VYJxrrYTBR683Je/
Score3/10 -