General
-
Target
992-94-0x00000000001E0000-0x000000000020A000-memory.dmp
-
Size
168KB
-
Sample
221208-bhm2sagf72
-
MD5
636eb8f7f01dc41aa3a5068f7650b378
-
SHA1
43813f29575b5bde2d2b188726f04f96f3215bd3
-
SHA256
02900e6eb7511f87d7e8de75f13d63d01f772702f0f4b989b2161a0723e06892
-
SHA512
0ea7675992be959d6c5fea95c529485d93d94dd4a11b23817fa888752f60dd875c01dc9e25674d7f2ddb487d2303423393fda152e4607fa11fc1105a999b64b1
-
SSDEEP
3072:egcnehhT9XxeQQ7bP9BOAmJce3gLTBfNeSO/yaoICv:h7phnQXP9B7mJR3gLTBFet/g
Behavioral task
behavioral1
Sample
992-94-0x00000000001E0000-0x000000000020A000-memory.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
992-94-0x00000000001E0000-0x000000000020A000-memory.dll
Resource
win10v2004-20220812-en
Malware Config
Extracted
qakbot
404.46
BB09
1670354428
216.82.134.218:443
49.175.72.56:443
12.172.173.82:22
12.172.173.82:50001
190.24.45.24:995
103.144.201.62:2078
24.142.218.202:443
70.160.80.210:443
24.228.132.224:2222
117.186.222.30:993
173.18.126.3:443
75.99.125.235:2222
172.90.139.138:2222
136.232.184.134:995
123.3.240.16:995
76.100.159.250:443
66.191.69.18:995
181.118.183.44:443
31.167.254.199:995
183.82.100.110:2222
83.92.85.93:443
91.169.12.198:32100
24.64.114.59:2222
74.66.134.24:443
78.69.251.252:2222
91.68.227.219:443
12.172.173.82:993
24.177.111.153:443
85.7.61.22:2222
70.181.149.227:443
173.239.94.212:443
92.24.200.226:995
104.152.223.133:443
80.13.179.151:2222
69.119.123.159:2222
70.95.236.129:443
64.121.161.102:443
70.115.104.126:995
12.172.173.82:995
221.161.103.6:443
66.131.25.6:443
200.109.14.93:2222
213.91.235.146:443
76.80.180.154:995
2.83.12.243:443
81.248.77.37:2222
12.172.173.82:465
70.64.77.115:443
75.143.236.149:443
81.229.117.95:2222
75.98.154.19:443
121.122.99.223:995
47.34.30.133:443
92.189.214.236:2222
216.196.245.102:2083
136.244.25.165:443
188.48.123.229:995
90.104.22.28:2222
204.210.210.7:443
78.92.133.215:443
47.41.154.250:443
50.68.204.71:995
65.30.139.145:995
71.247.10.63:995
58.162.223.233:443
50.68.204.71:443
73.161.176.218:443
58.247.115.126:995
199.83.165.233:443
98.145.23.67:443
84.35.26.14:995
24.64.114.59:3389
149.126.159.106:443
116.74.164.2:443
24.206.27.39:443
12.172.173.82:21
77.86.98.236:443
50.68.204.71:993
190.206.70.80:2222
41.44.19.36:995
137.186.193.226:3389
139.216.164.122:443
184.176.154.83:995
92.207.132.174:2222
142.161.27.232:2222
73.155.10.79:443
176.142.207.63:443
103.55.67.180:443
184.153.132.82:443
76.20.42.45:443
174.104.184.149:443
108.6.249.139:443
69.133.162.35:443
198.2.51.242:993
184.101.163.128:443
70.77.116.233:443
24.64.114.59:61202
66.176.250.180:443
75.158.15.211:443
181.164.194.228:443
72.200.109.104:443
174.101.111.4:443
86.225.214.138:2222
86.98.23.199:443
84.113.121.103:443
86.96.75.237:2222
162.248.14.107:443
90.89.95.158:2222
80.0.74.165:443
73.36.196.11:443
27.32.171.38:443
176.151.15.101:443
87.65.160.87:995
78.247.21.20:443
24.64.114.59:2078
74.93.148.97:995
82.9.210.36:443
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
992-94-0x00000000001E0000-0x000000000020A000-memory.dmp
-
Size
168KB
-
MD5
636eb8f7f01dc41aa3a5068f7650b378
-
SHA1
43813f29575b5bde2d2b188726f04f96f3215bd3
-
SHA256
02900e6eb7511f87d7e8de75f13d63d01f772702f0f4b989b2161a0723e06892
-
SHA512
0ea7675992be959d6c5fea95c529485d93d94dd4a11b23817fa888752f60dd875c01dc9e25674d7f2ddb487d2303423393fda152e4607fa11fc1105a999b64b1
-
SSDEEP
3072:egcnehhT9XxeQQ7bP9BOAmJce3gLTBfNeSO/yaoICv:h7phnQXP9B7mJR3gLTBFet/g
Score3/10 -