General
-
Target
f651d4ab514a9cc9b599b663bb2356bd752f47f6cf83abf87a1e27373f577b84
-
Size
1012KB
-
Sample
230129-wbfdkshc6t
-
MD5
53656380baec56fec5ef81a63c199d68
-
SHA1
8e8ae99b78a074a32ef5f7c19e8b8e7fdb6a7e1b
-
SHA256
f651d4ab514a9cc9b599b663bb2356bd752f47f6cf83abf87a1e27373f577b84
-
SHA512
235a1b3db2a9491e0b877fe5e2f9c0380a8cc81d1d499a7066d32963c5dc223cdfa4cad90ec9d71f5f9ecac396fe01a73a1fbc78c7e17bb98f08bf66ade3f7a8
-
SSDEEP
24576:WQyMCN663wyUf0BrUS0oAK4oUeETDKVKi+oO01:hCN3efErnlfqgtOS
Static task
static1
Behavioral task
behavioral1
Sample
f651d4ab514a9cc9b599b663bb2356bd752f47f6cf83abf87a1e27373f577b84.exe
Resource
win7-20220812-en
Malware Config
Extracted
qakbot
323.6
sp41
1558440615
68.238.144.55:443
65.116.179.83:443
64.228.72.42:2222
73.82.248.103:443
50.101.51.56:3389
68.59.209.183:995
50.101.51.56:8443
190.202.246.58:443
67.141.241.27:995
186.146.51.149:443
50.78.93.74:443
181.197.195.138:995
139.60.151.72:443
104.3.91.20:995
174.48.72.160:443
186.47.208.238:50000
190.120.196.18:443
68.174.117.63:443
50.247.230.33:443
69.203.218.89:995
47.23.101.26:995
2.50.156.213:443
107.184.153.197:995
189.210.97.147:993
217.165.164.9:443
173.168.105.213:443
97.98.62.150:443
100.35.110.191:443
208.69.72.135:2222
108.55.23.221:443
181.25.208.7:995
70.24.37.17:2222
209.137.209.84:443
73.209.173.140:2222
72.29.181.77:2083
70.51.218.129:2222
73.138.194.145:2222
69.70.37.246:465
204.111.80.128:3389
75.88.101.96:443
70.105.162.74:443
65.184.83.199:2222
74.99.173.166:443
166.62.180.194:2222
76.174.73.58:443
47.146.173.204:443
64.20.68.35:2083
190.120.196.18:995
190.120.196.18:993
190.120.196.18:990
190.120.196.18:1194
108.49.108.127:443
50.192.222.65:443
96.64.59.185:995
184.179.87.226:2222
184.179.87.226:50001
184.179.87.226:32101
73.226.220.56:443
76.93.237.152:443
173.22.120.11:2222
41.202.79.201:990
67.83.105.68:2222
68.50.243.128:443
65.30.12.240:443
72.94.220.120:443
184.180.157.203:2222
96.241.121.101:443
96.20.94.194:2222
100.38.177.146:443
70.30.55.185:2222
172.78.58.23:443
24.164.79.147:443
166.78.243.43:443
198.145.46.30:1194
23.228.172.135:443
98.181.182.13:2078
73.104.218.229:0
90.229.145.250:2222
111.88.200.81:995
216.221.88.142:443
71.210.140.93:995
73.78.149.206:443
70.24.216.198:995
68.69.233.74:443
108.161.53.113:443
97.77.255.210:443
186.50.197.136:443
193.251.5.202:2222
67.214.201.117:2222
47.214.144.253:443
68.238.56.27:443
96.22.239.27:2222
96.20.238.2:2222
103.9.226.57:2222
192.198.85.26:443
47.184.192.249:443
24.76.123.171:443
207.179.194.91:443
187.131.177.217:443
76.85.30.25:995
41.202.79.201:995
46.100.165.6:443
197.46.127.221:443
181.143.141.226:995
24.180.7.155:443
72.194.226.99:2083
65.92.121.201:32100
96.20.238.2:2078
24.154.4.40:995
75.177.162.141:443
197.89.33.58:32100
100.16.222.65:443
209.182.122.217:443
162.155.94.162:22
99.197.172.236:995
72.47.152.29:443
94.99.62.11:443
174.96.5.251:443
68.184.225.247:443
174.55.131.144:2222
71.197.126.250:443
189.159.32.179:443
76.93.183.98:443
47.156.73.179:443
69.176.38.63:443
192.136.215.131:443
70.178.58.213:443
201.254.88.96:443
73.101.114.147:995
47.180.66.10:995
192.100.72.2:2222
71.210.168.63:443
66.168.244.39:443
50.36.181.167:443
70.93.130.156:443
69.145.68.43:443
146.135.5.180:2087
173.20.116.156:443
74.139.37.244:443
172.73.244.4:443
181.135.235.70:443
187.143.116.76:443
73.55.10.195:443
173.70.165.101:995
187.156.72.253:2222
72.46.197.61:443
190.99.7.18:443
75.185.236.100:443
104.255.82.205:443
71.241.235.22:995
Targets
-
-
Target
f651d4ab514a9cc9b599b663bb2356bd752f47f6cf83abf87a1e27373f577b84
-
Size
1012KB
-
MD5
53656380baec56fec5ef81a63c199d68
-
SHA1
8e8ae99b78a074a32ef5f7c19e8b8e7fdb6a7e1b
-
SHA256
f651d4ab514a9cc9b599b663bb2356bd752f47f6cf83abf87a1e27373f577b84
-
SHA512
235a1b3db2a9491e0b877fe5e2f9c0380a8cc81d1d499a7066d32963c5dc223cdfa4cad90ec9d71f5f9ecac396fe01a73a1fbc78c7e17bb98f08bf66ade3f7a8
-
SSDEEP
24576:WQyMCN663wyUf0BrUS0oAK4oUeETDKVKi+oO01:hCN3efErnlfqgtOS
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-