General
-
Target
c5.zip
-
Size
421KB
-
Sample
221201-ysws1afd56
-
MD5
b6531d0b651f41baab8584e384d670e8
-
SHA1
7374d10f7d591f80b9b88527cb32de22c7090fe3
-
SHA256
98300b90c51b8f3faeab29dad9493f2036fcf30448a0f1b49b6e11257e90fba0
-
SHA512
398112d401caa4b98308fc9e9c40dd72de15db94f1d7643dd187fda661c385ccfb598c62eb228df1a2188845f9e14dafca5f0fa2086ddfa9352169ee9a886e86
-
SSDEEP
12288:IWgYoDeG2h6J0pkDKwJ5/JCBXtJYjA7gDoKIRCD0wr7of8:uYgxTJ0pkDKAo9P08KISh7G8
Static task
static1
Behavioral task
behavioral1
Sample
c5.dll
Resource
win7-20221111-en
Malware Config
Extracted
qakbot
404.46
tzr03
1669896814
105.99.88.96:443
92.189.214.236:2222
108.162.6.34:443
84.35.26.14:995
12.172.173.82:990
188.54.99.243:995
71.31.101.183:443
80.13.179.151:2222
90.119.197.132:2222
47.41.154.250:443
109.149.148.184:2222
82.9.210.36:443
75.161.233.194:995
81.229.117.95:2222
90.116.219.167:2222
90.162.45.154:2222
190.74.104.149:465
76.100.159.250:443
105.108.215.158:990
197.0.145.209:443
70.115.104.126:995
50.90.249.161:443
109.11.175.42:2222
119.82.121.63:443
80.0.74.165:443
24.64.114.59:3389
178.191.21.187:995
70.66.199.12:443
216.196.245.102:2083
82.36.36.76:443
71.247.10.63:995
184.155.91.69:443
201.208.139.250:2222
12.172.173.82:21
199.83.165.233:443
90.104.22.28:2222
184.176.154.83:995
92.207.132.174:2222
92.185.204.18:2078
69.133.162.35:443
2.99.47.198:2222
24.9.220.167:443
142.161.27.232:2222
108.6.249.139:443
213.67.255.57:2222
76.127.192.23:443
77.86.98.236:443
174.77.209.5:443
12.172.173.82:50001
75.158.15.211:443
85.61.165.153:2222
181.164.194.228:443
24.64.114.59:61202
92.136.183.239:2222
86.225.214.138:2222
50.68.204.71:995
216.196.245.102:2078
47.34.30.133:443
217.128.91.196:2222
73.36.196.11:443
87.202.101.164:50000
76.20.42.45:443
176.151.15.101:443
172.117.139.142:995
24.64.114.59:2078
92.106.70.62:2222
24.206.27.39:443
156.216.253.65:995
93.164.248.234:443
89.79.229.50:443
86.165.15.180:2222
76.11.14.249:443
92.186.69.229:2222
91.165.188.74:50000
175.205.2.54:443
27.99.45.237:2222
72.200.109.104:443
103.144.201.62:2078
12.172.173.82:22
70.160.80.210:443
109.177.245.176:2222
102.159.105.167:995
50.68.204.71:443
50.68.204.71:993
62.31.130.138:465
77.126.81.208:443
71.46.234.171:443
152.170.17.136:443
73.223.248.31:443
108.162.6.34:995
24.142.218.202:443
66.191.69.18:995
186.64.67.9:443
124.122.55.68:443
80.121.50.13:443
216.82.134.218:443
174.104.184.149:443
173.18.126.3:443
172.90.139.138:2222
183.82.100.110:2222
184.153.132.82:443
86.130.9.180:2222
86.195.32.149:2222
83.92.85.93:443
92.24.200.226:995
173.239.94.212:443
98.145.23.67:443
24.64.114.59:2222
182.66.197.35:443
139.216.164.122:443
102.158.156.142:443
87.221.197.110:2222
12.172.173.82:993
87.99.116.47:443
176.142.207.63:443
91.68.227.219:443
178.153.195.40:443
109.133.67.116:995
85.152.152.46:443
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
c5.jpg
-
Size
744KB
-
MD5
acb7cbc7849093e176fdb174a7095ae5
-
SHA1
35d6908536abe74542d114f56aaaa61346e57ba3
-
SHA256
83a8bffa20422e5b4b4d1981506c4ff9652b8886df4de045ef781e4595014fe9
-
SHA512
137a557ff1e9c861ba88e19f27b6a7e6b53d46e228d14f16020e4836ac251f58cf70712b813e00b5b16d5aa9536748e5d199ec9be29509bbf77c64ec67540115
-
SSDEEP
12288:cBA/2eiIRvULU1QYM3QGBjfR7taXIIg7WP58FXW+tlkzWKgHd6QQBGPpBMkff:R+81q5QOR7QUWYxYO0BEnHf
-