General
-
Target
2012-57-0x0000000002040000-0x000000000206A000-memory.dmp
-
Size
168KB
-
Sample
221216-cq7a3agg31
-
MD5
6d731532dc8e55de4c59a6584d8b2dd8
-
SHA1
72c1089f1ea58da01815fa87f2013862b944a947
-
SHA256
d58f490a9a2e6ff540a77191b3dc771f5f5407040ed2c07db1ad945415f29d64
-
SHA512
0e7cbccd1d5df16f3f074587b187886026a8c92685edd5b450fb82eddcaf1325d94f4fc46fec654e8bee8478d634cfe98a46fd17c36076a02e8f6367c76d1a02
-
SSDEEP
3072:4gi/4ZXJDpi80XfLzCANdOJ6benWTTBfJWJO/ya3cv:6w5N30PLzHGJtnWTTBBWg/
Behavioral task
behavioral1
Sample
2012-57-0x0000000002040000-0x000000000206A000-memory.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2012-57-0x0000000002040000-0x000000000206A000-memory.dll
Resource
win10v2004-20221111-en
Malware Config
Extracted
qakbot
404.46
azd
1670585125
172.90.139.138:2222
90.116.219.167:2222
173.239.94.212:443
91.169.12.198:32100
74.66.134.24:443
66.191.69.18:995
182.75.189.42:995
78.69.251.252:2222
98.145.23.67:443
103.71.21.107:443
197.94.219.133:443
91.68.227.219:443
12.172.173.82:993
86.176.83.127:2222
64.121.161.102:443
41.98.21.114:443
92.154.17.149:2222
151.65.67.211:443
89.129.109.27:2222
76.11.14.249:443
69.119.123.159:2222
70.66.199.12:443
12.172.173.82:990
183.82.100.110:2222
83.114.60.6:2222
92.189.214.236:2222
70.115.104.126:995
190.18.236.175:443
121.122.99.223:995
72.53.103.56:443
91.165.188.74:50000
12.172.173.82:995
156.220.229.249:993
86.96.75.237:2222
85.152.152.46:443
181.118.183.44:443
76.80.180.154:995
81.248.77.37:2222
90.66.229.185:2222
86.130.9.250:2222
172.117.139.142:995
12.172.173.82:465
75.143.236.149:443
81.229.117.95:2222
81.111.108.123:443
50.68.204.71:995
124.122.55.68:443
139.5.239.14:443
37.56.111.49:995
46.10.198.106:443
85.61.165.153:2222
90.104.22.28:2222
88.126.94.4:50000
90.89.95.158:2222
83.213.201.104:993
73.223.248.31:443
47.41.154.250:443
2.99.47.198:2222
190.199.169.127:993
83.92.85.93:443
184.68.116.146:2222
73.161.176.218:443
150.107.231.59:2222
98.178.242.28:443
213.67.255.57:2222
174.104.184.149:443
108.6.249.139:443
84.35.26.14:995
149.126.159.106:443
184.68.116.146:3389
37.14.229.220:2222
24.206.27.39:443
199.83.165.233:443
84.215.202.22:443
71.247.10.63:995
50.68.204.71:443
86.169.19.140:2222
76.20.42.45:443
70.55.120.16:2222
69.133.162.35:443
12.172.173.82:21
72.200.109.104:443
50.68.204.71:993
2.83.12.243:443
184.176.154.83:995
176.177.136.35:443
92.207.132.174:2222
174.77.209.5:443
142.161.27.232:2222
86.159.48.25:2222
100.6.8.7:443
184.153.132.82:443
27.109.19.90:2078
94.105.123.53:443
198.2.51.242:993
70.120.228.205:443
75.158.15.211:443
181.164.194.223:443
184.68.116.146:61202
184.68.116.146:2078
86.225.214.138:2222
78.213.14.206:443
176.142.207.63:443
73.36.196.11:443
197.26.142.159:443
176.151.15.101:443
87.65.160.87:995
92.24.200.226:995
87.221.197.110:2222
77.86.98.236:443
162.248.14.107:443
84.113.121.103:443
137.186.193.226:3389
92.8.190.211:2222
201.208.139.250:2222
12.172.173.82:22
75.98.154.19:443
24.142.218.202:443
70.77.116.233:443
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
2012-57-0x0000000002040000-0x000000000206A000-memory.dmp
-
Size
168KB
-
MD5
6d731532dc8e55de4c59a6584d8b2dd8
-
SHA1
72c1089f1ea58da01815fa87f2013862b944a947
-
SHA256
d58f490a9a2e6ff540a77191b3dc771f5f5407040ed2c07db1ad945415f29d64
-
SHA512
0e7cbccd1d5df16f3f074587b187886026a8c92685edd5b450fb82eddcaf1325d94f4fc46fec654e8bee8478d634cfe98a46fd17c36076a02e8f6367c76d1a02
-
SSDEEP
3072:4gi/4ZXJDpi80XfLzCANdOJ6benWTTBfJWJO/ya3cv:6w5N30PLzHGJtnWTTBBWg/
Score3/10 -