General
-
Target
5d9add7c36662f109ef5cd6850261fa9c380d4932331d2d3f0a61fb544403cf4
-
Size
398KB
-
Sample
221130-pskajaah96
-
MD5
6426d8d5c125948a65755253bb9e289d
-
SHA1
27856e3204d18c41b7fd36465892c6db7dac35ec
-
SHA256
5d9add7c36662f109ef5cd6850261fa9c380d4932331d2d3f0a61fb544403cf4
-
SHA512
0f9e2d7212e3426e51a2c14a41234978f77a1f7ab62f85c3c9edef180d793747319408fc7aab8e01a675984d4caa295e21cd0c1772483500714cdd4b114539d0
-
SSDEEP
6144:C9ykYklEwrPmRPWEpWFn2E6lyDntvhhOU35RJEesN23wU7HuAmHK+Q:s2wr03pdf8vhhOKJET8Byq+Q
Static task
static1
Behavioral task
behavioral1
Sample
5d9add7c36662f109ef5cd6850261fa9c380d4932331d2d3f0a61fb544403cf4.dll
Resource
win7-20220812-en
Malware Config
Extracted
qakbot
401.138
biden01
1613656969
172.87.157.235:3389
173.184.119.153:995
81.150.181.168:2222
71.187.170.235:443
197.45.110.165:995
86.160.137.132:443
86.236.77.68:2222
106.51.85.162:443
108.31.15.10:995
38.92.225.121:443
72.252.201.69:443
71.117.132.169:443
98.173.34.212:995
83.110.12.140:2222
95.77.223.148:443
41.39.134.183:443
85.52.72.32:2222
195.12.154.8:443
108.160.123.244:443
96.57.188.174:2222
82.127.125.209:990
71.199.192.62:443
172.115.177.204:2222
97.69.160.4:2222
83.110.103.152:443
87.202.87.210:2222
84.247.55.190:8443
119.153.62.76:3389
71.88.193.17:443
78.63.226.32:443
47.187.108.172:443
24.50.118.93:443
81.97.154.100:443
140.82.49.12:443
90.101.117.122:2222
203.194.110.74:443
193.248.221.184:2222
173.25.45.66:443
24.139.72.117:443
144.139.47.206:443
45.63.107.192:995
24.55.112.61:443
45.32.211.207:443
144.202.38.185:443
45.77.117.108:995
207.246.116.237:8443
207.246.77.75:2222
45.77.115.208:2222
149.28.99.97:995
149.28.98.196:443
45.77.115.208:8443
45.32.211.207:2222
149.28.101.90:443
207.246.116.237:995
45.32.211.207:8443
45.32.211.207:995
45.77.117.108:8443
45.77.115.208:995
207.246.77.75:995
149.28.101.90:995
207.246.116.237:2222
45.63.107.192:443
149.28.98.196:2222
45.77.115.208:443
207.246.77.75:443
45.77.117.108:2222
207.246.116.237:443
144.202.38.185:2222
149.28.101.90:8443
45.77.117.108:443
207.246.77.75:8443
149.28.101.90:2222
149.28.98.196:995
144.202.38.185:995
73.25.124.140:2222
182.48.193.200:443
85.58.200.50:2222
89.3.198.238:443
71.74.12.34:443
78.185.59.190:443
172.78.30.215:443
75.67.192.125:443
188.25.63.105:443
216.201.162.158:443
197.161.154.132:443
47.196.192.184:443
45.118.216.157:443
176.205.222.30:2078
77.211.30.202:995
195.43.173.70:443
50.29.166.232:995
196.221.207.137:995
78.97.207.104:443
47.22.148.6:443
77.27.204.204:995
217.165.231.192:2078
105.198.236.101:443
105.198.236.99:443
196.151.252.84:443
68.186.192.69:443
157.131.108.180:443
108.46.145.30:443
2.232.253.79:995
213.60.147.140:443
98.121.187.78:443
202.184.20.119:443
59.90.246.200:443
1.52.227.184:443
176.181.247.197:443
82.12.157.95:995
84.72.35.226:443
2.7.116.188:2222
217.133.54.140:32100
115.133.243.6:443
189.223.234.23:995
202.188.138.162:443
90.65.236.181:2222
27.223.92.142:995
136.232.34.70:443
45.63.107.192:2222
173.21.10.71:2222
125.239.152.76:995
67.6.12.4:443
144.139.166.18:443
75.118.1.141:443
75.136.26.147:443
71.197.126.250:443
45.46.53.140:2222
73.153.211.227:443
74.222.204.82:995
108.54.85.142:443
74.68.144.202:443
70.49.88.199:2222
71.14.110.199:443
199.19.117.131:443
71.163.223.159:443
189.132.57.253:443
32.210.98.6:443
98.252.118.134:443
187.250.118.233:995
186.28.55.211:443
201.143.235.13:443
189.210.115.207:443
189.211.177.183:995
86.245.46.27:2222
151.205.102.42:443
72.240.200.181:2222
98.240.24.57:443
209.210.187.52:995
47.146.169.85:443
-
salt
jHxastDcds)oMc=jvh7wdUhxcsdt2
Targets
-
-
Target
5d9add7c36662f109ef5cd6850261fa9c380d4932331d2d3f0a61fb544403cf4
-
Size
398KB
-
MD5
6426d8d5c125948a65755253bb9e289d
-
SHA1
27856e3204d18c41b7fd36465892c6db7dac35ec
-
SHA256
5d9add7c36662f109ef5cd6850261fa9c380d4932331d2d3f0a61fb544403cf4
-
SHA512
0f9e2d7212e3426e51a2c14a41234978f77a1f7ab62f85c3c9edef180d793747319408fc7aab8e01a675984d4caa295e21cd0c1772483500714cdd4b114539d0
-
SSDEEP
6144:C9ykYklEwrPmRPWEpWFn2E6lyDntvhhOU35RJEesN23wU7HuAmHK+Q:s2wr03pdf8vhhOKJET8Byq+Q
-
Loads dropped DLL
-