General
-
Target
1336-98-0x0000000000300000-0x000000000032A000-memory.dmp
-
Size
168KB
-
Sample
221210-t8rrrsad9w
-
MD5
1ba70fd21bbbfd89f6647d02761839b3
-
SHA1
3201609b7ff8f2520c940f11226e46ffa48fd796
-
SHA256
ccfe0b213db5d301230a49d4d665b33335f4a6aad43ce1a8287c177ddb26de4d
-
SHA512
babb545950dadec0b159cd6401e4e21a063c294d0cb72be25a75b0130c08206f4fe8bd09702348a0c83ca3726597b00bbfcc7f701e40d959ef58447e32ea73f2
-
SSDEEP
3072:ygCCXJXBpdycCzzxhgA2J6AT9nTBf5SJO/ya3cv:ldTd3CXxhV2JJT9nTBRSg/
Behavioral task
behavioral1
Sample
1336-98-0x0000000000300000-0x000000000032A000-memory.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1336-98-0x0000000000300000-0x000000000032A000-memory.dll
Resource
win10v2004-20220812-en
Malware Config
Extracted
qakbot
404.46
azd
1670585125
172.90.139.138:2222
90.116.219.167:2222
173.239.94.212:443
91.169.12.198:32100
74.66.134.24:443
66.191.69.18:995
182.75.189.42:995
78.69.251.252:2222
98.145.23.67:443
103.71.21.107:443
197.94.219.133:443
91.68.227.219:443
12.172.173.82:993
86.176.83.127:2222
64.121.161.102:443
41.98.21.114:443
92.154.17.149:2222
151.65.67.211:443
89.129.109.27:2222
76.11.14.249:443
69.119.123.159:2222
70.66.199.12:443
12.172.173.82:990
183.82.100.110:2222
83.114.60.6:2222
92.189.214.236:2222
70.115.104.126:995
190.18.236.175:443
121.122.99.223:995
72.53.103.56:443
91.165.188.74:50000
12.172.173.82:995
156.220.229.249:993
86.96.75.237:2222
85.152.152.46:443
181.118.183.44:443
76.80.180.154:995
81.248.77.37:2222
90.66.229.185:2222
86.130.9.250:2222
172.117.139.142:995
12.172.173.82:465
75.143.236.149:443
81.229.117.95:2222
81.111.108.123:443
50.68.204.71:995
124.122.55.68:443
139.5.239.14:443
37.56.111.49:995
46.10.198.106:443
85.61.165.153:2222
90.104.22.28:2222
88.126.94.4:50000
90.89.95.158:2222
83.213.201.104:993
73.223.248.31:443
47.41.154.250:443
2.99.47.198:2222
190.199.169.127:993
83.92.85.93:443
184.68.116.146:2222
73.161.176.218:443
150.107.231.59:2222
98.178.242.28:443
213.67.255.57:2222
174.104.184.149:443
108.6.249.139:443
84.35.26.14:995
149.126.159.106:443
184.68.116.146:3389
37.14.229.220:2222
24.206.27.39:443
199.83.165.233:443
84.215.202.22:443
71.247.10.63:995
50.68.204.71:443
86.169.19.140:2222
76.20.42.45:443
70.55.120.16:2222
69.133.162.35:443
12.172.173.82:21
72.200.109.104:443
50.68.204.71:993
2.83.12.243:443
184.176.154.83:995
176.177.136.35:443
92.207.132.174:2222
174.77.209.5:443
142.161.27.232:2222
86.159.48.25:2222
100.6.8.7:443
184.153.132.82:443
27.109.19.90:2078
94.105.123.53:443
198.2.51.242:993
70.120.228.205:443
75.158.15.211:443
181.164.194.223:443
184.68.116.146:61202
184.68.116.146:2078
86.225.214.138:2222
78.213.14.206:443
176.142.207.63:443
73.36.196.11:443
197.26.142.159:443
176.151.15.101:443
87.65.160.87:995
92.24.200.226:995
87.221.197.110:2222
77.86.98.236:443
162.248.14.107:443
84.113.121.103:443
137.186.193.226:3389
92.8.190.211:2222
201.208.139.250:2222
12.172.173.82:22
75.98.154.19:443
24.142.218.202:443
70.77.116.233:443
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
1336-98-0x0000000000300000-0x000000000032A000-memory.dmp
-
Size
168KB
-
MD5
1ba70fd21bbbfd89f6647d02761839b3
-
SHA1
3201609b7ff8f2520c940f11226e46ffa48fd796
-
SHA256
ccfe0b213db5d301230a49d4d665b33335f4a6aad43ce1a8287c177ddb26de4d
-
SHA512
babb545950dadec0b159cd6401e4e21a063c294d0cb72be25a75b0130c08206f4fe8bd09702348a0c83ca3726597b00bbfcc7f701e40d959ef58447e32ea73f2
-
SSDEEP
3072:ygCCXJXBpdycCzzxhgA2J6AT9nTBf5SJO/ya3cv:ldTd3CXxhV2JJT9nTBRSg/
Score3/10 -