General
-
Target
436-97-0x0000000000190000-0x00000000001BA000-memory.dmp
-
Size
168KB
-
Sample
221209-mb79xsfg6y
-
MD5
40e240b717c74a96abaf171f100543aa
-
SHA1
bc55fb0f68ca46ccbd8ba08161b6bd8fc2855756
-
SHA256
ac787fded0c32b4c2fdd93648e6e8c5619f1b1b705866ba8ae520bc032a679ad
-
SHA512
d074847ed0b796869dec4d7c7d7b960a7bbf8a220b3d4c64008d42ddcf21f0b79fb4b03159510bfaff74d8e3209db9b7a3608fc45055b3a04c3e7737cc1b21c5
-
SSDEEP
3072:ogKraqmkKEgc60s3HC6zBAkJfF1znTBfJAHO/yaoICv:BvkK1LLXCIqkJ91znTBBAu/g
Behavioral task
behavioral1
Sample
436-97-0x0000000000190000-0x00000000001BA000-memory.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
436-97-0x0000000000190000-0x00000000001BA000-memory.dll
Resource
win10v2004-20220901-en
Malware Config
Extracted
qakbot
404.46
BB09
1670354428
216.82.134.218:443
49.175.72.56:443
12.172.173.82:22
12.172.173.82:50001
190.24.45.24:995
103.144.201.62:2078
24.142.218.202:443
70.160.80.210:443
24.228.132.224:2222
117.186.222.30:993
173.18.126.3:443
75.99.125.235:2222
172.90.139.138:2222
136.232.184.134:995
123.3.240.16:995
76.100.159.250:443
66.191.69.18:995
181.118.183.44:443
31.167.254.199:995
183.82.100.110:2222
83.92.85.93:443
91.169.12.198:32100
24.64.114.59:2222
74.66.134.24:443
78.69.251.252:2222
91.68.227.219:443
12.172.173.82:993
24.177.111.153:443
85.7.61.22:2222
70.181.149.227:443
173.239.94.212:443
92.24.200.226:995
104.152.223.133:443
80.13.179.151:2222
69.119.123.159:2222
70.95.236.129:443
64.121.161.102:443
70.115.104.126:995
12.172.173.82:995
221.161.103.6:443
66.131.25.6:443
200.109.14.93:2222
213.91.235.146:443
76.80.180.154:995
2.83.12.243:443
81.248.77.37:2222
12.172.173.82:465
70.64.77.115:443
75.143.236.149:443
81.229.117.95:2222
75.98.154.19:443
121.122.99.223:995
47.34.30.133:443
92.189.214.236:2222
216.196.245.102:2083
136.244.25.165:443
188.48.123.229:995
90.104.22.28:2222
204.210.210.7:443
78.92.133.215:443
47.41.154.250:443
50.68.204.71:995
65.30.139.145:995
71.247.10.63:995
58.162.223.233:443
50.68.204.71:443
73.161.176.218:443
58.247.115.126:995
199.83.165.233:443
98.145.23.67:443
84.35.26.14:995
24.64.114.59:3389
149.126.159.106:443
116.74.164.2:443
24.206.27.39:443
12.172.173.82:21
77.86.98.236:443
50.68.204.71:993
190.206.70.80:2222
41.44.19.36:995
137.186.193.226:3389
139.216.164.122:443
184.176.154.83:995
92.207.132.174:2222
142.161.27.232:2222
73.155.10.79:443
176.142.207.63:443
103.55.67.180:443
184.153.132.82:443
76.20.42.45:443
174.104.184.149:443
108.6.249.139:443
69.133.162.35:443
198.2.51.242:993
184.101.163.128:443
70.77.116.233:443
24.64.114.59:61202
66.176.250.180:443
75.158.15.211:443
181.164.194.228:443
72.200.109.104:443
174.101.111.4:443
86.225.214.138:2222
86.98.23.199:443
84.113.121.103:443
86.96.75.237:2222
162.248.14.107:443
90.89.95.158:2222
80.0.74.165:443
73.36.196.11:443
27.32.171.38:443
176.151.15.101:443
87.65.160.87:995
78.247.21.20:443
24.64.114.59:2078
74.93.148.97:995
82.9.210.36:443
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
436-97-0x0000000000190000-0x00000000001BA000-memory.dmp
-
Size
168KB
-
MD5
40e240b717c74a96abaf171f100543aa
-
SHA1
bc55fb0f68ca46ccbd8ba08161b6bd8fc2855756
-
SHA256
ac787fded0c32b4c2fdd93648e6e8c5619f1b1b705866ba8ae520bc032a679ad
-
SHA512
d074847ed0b796869dec4d7c7d7b960a7bbf8a220b3d4c64008d42ddcf21f0b79fb4b03159510bfaff74d8e3209db9b7a3608fc45055b3a04c3e7737cc1b21c5
-
SSDEEP
3072:ogKraqmkKEgc60s3HC6zBAkJfF1znTBfJAHO/yaoICv:BvkK1LLXCIqkJ91znTBBAu/g
Score3/10 -