General
-
Target
5b67702e6589f0e6765f7b0c240756386a1af9979ac3f15596fb2eebb06aa6a6
-
Size
779KB
-
Sample
230129-wbc88afh35
-
MD5
95a32c16293179a064855cbfd92094fb
-
SHA1
a91bfd968afa7d5ebf05a527dc49aed058289807
-
SHA256
5b67702e6589f0e6765f7b0c240756386a1af9979ac3f15596fb2eebb06aa6a6
-
SHA512
4c97df6773045823da0ac40cfff3f5095c47fdeb2a3d20ea24c11456fbf0d5a0030f11832b66476157b5f7e2815a766d41b2d11411f94a1640d52e994908b127
-
SSDEEP
12288:/jgcJlROl0jl5VnnR7wDfYT8yF5v4znqImCOtjrponmp0YUVusV4VA+I94W34ur:/UslSCvn4fYld4jmltWqST1
Static task
static1
Behavioral task
behavioral1
Sample
5b67702e6589f0e6765f7b0c240756386a1af9979ac3f15596fb2eebb06aa6a6.exe
Resource
win7-20221111-en
Malware Config
Extracted
qakbot
323.6
mg03
1560936755
107.12.140.181:443
172.115.189.208:443
73.139.60.106:443
206.51.202.106:50003
100.38.177.146:443
173.178.129.3:443
99.228.242.183:995
174.48.72.160:443
47.146.173.204:443
64.228.72.42:2222
174.67.179.109:443
75.131.72.82:443
209.137.209.84:443
75.71.201.170:443
64.53.242.181:995
92.99.231.188:443
71.191.132.8:443
71.77.231.251:443
73.226.220.56:443
38.123.196.166:995
12.156.140.210:443
181.197.195.138:995
186.48.139.43:443
24.180.7.155:443
96.20.238.2:2078
68.238.144.55:443
82.152.157.188:465
23.240.185.215:443
207.178.109.161:443
81.130.184.169:2222
68.14.210.246:22
96.20.238.2:2222
72.47.115.140:443
74.194.4.181:443
173.22.120.11:2222
104.53.87.13:443
184.180.157.203:2222
68.174.15.223:443
189.153.133.1:443
174.30.16.127:995
35.136.74.103:443
98.159.70.94:443
137.25.72.175:443
70.182.168.44:443
186.47.208.238:50000
50.195.233.61:443
217.162.149.212:443
76.85.30.25:995
190.120.196.18:443
47.23.101.26:995
166.62.129.86:443
67.200.146.98:2222
68.174.117.63:995
104.3.91.20:995
166.62.180.194:2222
96.22.239.27:2222
98.225.141.232:443
142.122.66.47:2222
68.83.59.107:443
72.213.98.233:443
173.20.116.156:443
66.214.75.176:995
68.43.112.34:443
81.149.189.61:2222
108.184.57.213:443
160.184.30.197:995
41.202.79.201:995
73.138.194.145:2222
72.132.247.194:443
173.163.24.169:443
47.54.175.3:2222
24.162.65.244:443
73.87.159.30:443
72.238.194.135:995
104.34.122.18:443
99.241.10.204:443
24.166.11.36:995
81.149.189.61:2078
97.77.255.210:443
24.116.110.191:443
72.29.181.77:2083
67.10.31.149:995
174.19.99.235:443
68.238.56.27:443
99.197.172.236:443
65.184.83.199:2222
75.89.201.248:443
24.184.0.90:2222
62.11.53.235:443
71.30.56.170:443
50.78.93.74:443
65.30.12.240:443
68.50.243.128:443
24.172.35.250:995
105.229.135.82:443
96.20.84.208:443
50.82.150.222:2222
24.119.196.171:443
50.247.230.33:443
24.27.82.216:2222
73.202.121.222:443
47.203.211.243:443
217.165.221.40:443
196.194.65.95:443
196.194.65.95:995
81.103.144.77:443
64.185.5.157:443
31.166.234.1:443
185.219.83.73:0
47.180.66.10:995
71.197.126.250:443
68.5.196.38:2087
104.255.82.205:443
68.225.250.136:443
162.244.225.30:443
98.236.87.243:995
173.91.40.31:443
76.174.122.204:443
179.36.34.115:443
70.29.120.49:2222
148.245.232.244:993
69.170.21.98:443
71.182.142.63:443
72.47.152.29:443
36.236.240.33:443
172.251.125.166:995
24.4.128.142:2222
65.92.39.203:2222
2.50.171.216:443
72.29.181.77:2222
98.181.182.13:2078
70.188.169.168:443
50.192.222.65:443
68.174.117.63:443
70.94.146.101:443
181.135.235.70:443
104.33.29.72:443
189.236.191.113:995
174.2.54.121:443
187.156.75.195:995
70.51.218.129:2222
99.231.208.9:443
187.233.62.133:443
68.187.28.217:2222
107.180.70.163:443
189.135.160.112:443
189.155.54.184:443
104.34.248.55:443
187.143.116.236:443
Targets
-
-
Target
5b67702e6589f0e6765f7b0c240756386a1af9979ac3f15596fb2eebb06aa6a6
-
Size
779KB
-
MD5
95a32c16293179a064855cbfd92094fb
-
SHA1
a91bfd968afa7d5ebf05a527dc49aed058289807
-
SHA256
5b67702e6589f0e6765f7b0c240756386a1af9979ac3f15596fb2eebb06aa6a6
-
SHA512
4c97df6773045823da0ac40cfff3f5095c47fdeb2a3d20ea24c11456fbf0d5a0030f11832b66476157b5f7e2815a766d41b2d11411f94a1640d52e994908b127
-
SSDEEP
12288:/jgcJlROl0jl5VnnR7wDfYT8yF5v4znqImCOtjrponmp0YUVusV4VA+I94W34ur:/UslSCvn4fYld4jmltWqST1
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-