General
-
Target
e2e6c47615594e423ef50d3c517d6556e9b9ab74cf06d44c236dabfc0d15c00a
-
Size
585KB
-
Sample
230129-wbdvrahc6s
-
MD5
5dba2a69765ba6617749f475c061db15
-
SHA1
295d14a356caced6fd3d0dee421bf3be5f5a7f64
-
SHA256
e2e6c47615594e423ef50d3c517d6556e9b9ab74cf06d44c236dabfc0d15c00a
-
SHA512
0dfb7f97a0537fc82fd174346b878147ef7203e25083e803843843445e5a1c635525a007d3fb545db5df4b72b822748789e350903d36112918dc987042055588
-
SSDEEP
12288:1sZIRgV4IT2Rm81rVBlNevgw6OoepN7mJm3vI2etAj:1RgV5T2F1rVgvgw84BmJivD/
Static task
static1
Behavioral task
behavioral1
Sample
e2e6c47615594e423ef50d3c517d6556e9b9ab74cf06d44c236dabfc0d15c00a.exe
Resource
win7-20220812-en
Malware Config
Extracted
qakbot
323.6
sp41
1558466304
68.59.209.183:995
50.101.51.56:8443
74.139.37.244:443
68.238.144.55:443
65.116.179.83:443
64.228.72.42:2222
173.202.3.154:50001
209.182.122.217:443
67.68.229.196:995
73.82.248.103:443
50.101.51.56:3389
70.105.162.74:443
65.184.83.199:2222
166.62.180.194:2222
75.190.118.68:990
47.146.173.204:443
64.20.68.35:2083
67.141.241.27:995
50.78.93.74:443
181.197.195.138:995
204.111.80.128:3389
174.48.72.160:443
186.47.208.238:50000
173.20.116.156:443
50.247.230.33:443
104.3.91.20:995
69.203.218.89:995
47.23.101.26:995
2.50.156.213:443
93.173.28.212:995
217.165.164.9:443
104.33.29.72:443
72.47.115.140:443
70.182.168.44:443
173.168.105.213:443
24.172.35.250:995
97.98.62.150:443
100.35.110.191:443
81.103.144.77:443
71.70.152.189:443
74.56.225.20:2222
208.69.72.135:2222
107.184.153.197:995
24.116.110.191:443
108.55.23.221:443
70.104.134.94:443
105.226.203.204:443
72.29.181.77:2083
181.25.208.7:995
70.24.37.17:2222
209.137.209.84:443
47.156.73.179:443
73.145.189.17:995
73.138.194.145:2222
69.70.37.246:465
72.23.181.97:995
75.88.101.96:443
96.64.59.185:995
184.179.87.226:2222
184.179.87.226:50001
184.179.87.226:32101
2.217.217.93:443
187.233.31.194:443
189.135.186.59:443
98.17.140.1:995
197.46.127.221:443
67.200.146.98:2222
50.192.222.65:443
174.2.54.121:443
70.30.55.185:2222
172.78.58.23:443
73.226.220.56:443
186.170.25.122:443
193.251.5.202:2222
65.75.94.213:2222
24.156.54.51:443
173.22.120.11:2222
41.202.79.201:990
73.55.10.195:443
68.14.237.155:3389
174.30.63.28:995
67.83.105.68:2222
64.20.68.35:2222
65.30.12.240:443
189.160.240.32:443
187.131.177.217:443
76.85.30.25:995
189.236.163.253:443
104.255.82.205:443
189.155.69.211:443
47.180.66.10:995
24.164.79.147:443
184.180.157.203:2222
189.140.167.137:443
70.183.177.71:2222
96.241.121.101:443
24.184.0.90:2222
187.156.72.253:2222
192.24.186.27:443
96.20.94.194:2222
166.78.243.43:443
100.38.177.146:443
23.228.172.135:443
98.181.182.13:2078
50.82.150.222:2222
96.18.231.166:0
67.171.30.99:995
24.154.4.40:995
65.92.121.201:32100
24.76.123.171:443
207.179.194.91:443
47.184.192.249:443
201.254.88.96:443
97.77.255.210:443
71.210.140.93:995
70.24.216.198:995
68.69.233.74:443
108.161.53.113:443
174.96.5.251:443
72.29.181.77:2222
75.177.162.141:443
186.50.197.136:443
74.194.4.181:443
68.184.225.247:443
166.62.247.246:3389
100.16.222.65:443
67.214.201.117:2222
47.214.144.253:443
68.238.56.27:443
38.121.250.85:995
96.22.239.27:2222
96.20.238.2:2222
68.200.70.207:2222
41.202.79.201:995
71.77.231.251:443
107.15.148.166:443
192.198.85.26:443
23.240.185.215:443
107.12.140.181:443
189.236.103.92:995
70.51.218.129:2222
99.241.10.204:443
73.136.27.210:995
71.86.66.219:443
64.229.193.135:995
73.37.101.47:443
69.170.21.98:443
72.47.152.29:443
71.30.56.170:443
38.121.250.85:443
Targets
-
-
Target
e2e6c47615594e423ef50d3c517d6556e9b9ab74cf06d44c236dabfc0d15c00a
-
Size
585KB
-
MD5
5dba2a69765ba6617749f475c061db15
-
SHA1
295d14a356caced6fd3d0dee421bf3be5f5a7f64
-
SHA256
e2e6c47615594e423ef50d3c517d6556e9b9ab74cf06d44c236dabfc0d15c00a
-
SHA512
0dfb7f97a0537fc82fd174346b878147ef7203e25083e803843843445e5a1c635525a007d3fb545db5df4b72b822748789e350903d36112918dc987042055588
-
SSDEEP
12288:1sZIRgV4IT2Rm81rVBlNevgw6OoepN7mJm3vI2etAj:1RgV5T2F1rVgvgw84BmJivD/
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-