General
-
Target
748-57-0x0000000000390000-0x00000000003BA000-memory.dmp
-
Size
168KB
-
Sample
221122-p5775agg51
-
MD5
ddca563f218d63573bda7bb77cf3ead9
-
SHA1
e497a2b7bcfc42d3943e18ea50e02711981e5ea8
-
SHA256
20d4b052685c6a92cb94dbceafc8ed5a7f3adf84ca6b76f27ebb6032cc8bb0a6
-
SHA512
09dc7ce9db096985c65cf158e0eaa5f30b90dc91df662143dcfd255fbd6e3df437c556431f987972bed6078cc1389600bc35401937b0d3fb08d25bcac4cf613e
-
SSDEEP
3072:ywh1VjQ9AwZ1OswizhAQJPX1lnTBfJ8g+CO/ya+aY:7ehuswizKQJv1lnTBB8Zd/
Behavioral task
behavioral1
Sample
748-57-0x0000000000390000-0x00000000003BA000-memory.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
748-57-0x0000000000390000-0x00000000003BA000-memory.dll
Resource
win10v2004-20221111-en
Malware Config
Extracted
qakbot
404.27
BB06
1668492308
49.175.72.56:443
81.229.117.95:2222
47.41.154.250:443
69.133.162.35:443
84.35.26.14:995
68.47.128.161:443
156.217.219.147:995
87.65.160.87:995
174.101.111.4:443
82.127.174.33:2222
91.169.12.198:32100
24.28.121.122:443
157.231.42.190:995
90.89.95.158:2222
74.33.84.227:443
24.64.114.59:2222
80.13.179.151:2222
64.207.237.118:443
24.206.27.39:443
170.253.25.35:443
151.30.53.233:443
86.225.214.138:2222
76.80.180.154:995
24.142.218.202:443
67.10.175.47:2222
90.104.22.28:2222
105.103.27.80:32103
80.0.74.165:443
142.161.27.232:2222
108.6.249.139:443
47.34.30.133:443
92.207.132.174:2222
172.117.139.142:995
137.186.193.226:3389
184.153.132.82:443
74.66.134.24:443
105.184.161.242:443
94.63.65.146:443
70.64.77.115:443
92.189.214.236:2222
58.247.115.126:995
100.16.107.117:443
2.84.98.228:2222
109.11.175.42:2222
193.92.233.183:995
174.0.224.214:443
172.90.139.138:2222
102.157.73.215:995
82.31.37.241:443
58.162.223.233:443
81.129.134.53:443
91.165.188.74:50000
87.223.80.45:443
46.177.99.230:995
180.151.104.143:443
174.77.209.5:443
157.231.42.190:443
24.49.232.96:443
73.165.119.20:443
82.41.186.124:443
213.91.235.146:443
50.68.204.71:443
99.229.146.120:443
193.3.19.137:443
73.36.196.11:443
24.116.45.121:443
76.80.180.154:993
199.83.165.233:443
41.96.224.19:443
86.133.237.3:443
85.59.61.52:2222
98.30.233.14:443
98.145.23.67:443
24.49.232.96:995
27.110.134.202:995
173.239.94.212:443
50.68.204.71:995
176.142.207.63:443
75.99.125.238:2222
90.221.5.105:443
64.123.103.123:443
79.37.204.67:443
76.68.34.167:2222
84.209.52.11:443
78.69.251.252:2222
76.127.192.23:443
149.126.159.224:443
77.126.81.208:443
186.64.67.39:443
123.3.240.16:995
70.50.3.214:2222
190.24.45.24:995
92.106.70.62:2222
24.228.132.224:2222
84.113.121.103:443
75.143.236.149:443
170.249.59.153:443
75.98.154.19:443
74.92.243.113:50000
174.104.184.149:443
200.233.108.153:995
190.18.236.175:443
76.9.168.249:443
92.109.39.207:443
190.78.64.132:993
131.106.168.223:443
2.88.219.187:443
79.92.15.6:443
73.88.173.113:443
94.70.37.145:2222
70.121.198.103:2078
174.115.87.57:443
82.154.201.177:443
41.109.78.231:995
209.171.163.72:995
72.82.136.90:443
200.93.14.206:2222
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
748-57-0x0000000000390000-0x00000000003BA000-memory.dmp
-
Size
168KB
-
MD5
ddca563f218d63573bda7bb77cf3ead9
-
SHA1
e497a2b7bcfc42d3943e18ea50e02711981e5ea8
-
SHA256
20d4b052685c6a92cb94dbceafc8ed5a7f3adf84ca6b76f27ebb6032cc8bb0a6
-
SHA512
09dc7ce9db096985c65cf158e0eaa5f30b90dc91df662143dcfd255fbd6e3df437c556431f987972bed6078cc1389600bc35401937b0d3fb08d25bcac4cf613e
-
SSDEEP
3072:ywh1VjQ9AwZ1OswizhAQJPX1lnTBfJ8g+CO/ya+aY:7ehuswizKQJv1lnTBB8Zd/
Score3/10 -