General
-
Target
140000.dll
-
Size
140KB
-
Sample
230202-rte4baha8w
-
MD5
fb64c12c918b7ad12383a25c846051f7
-
SHA1
52be47d61c97a93ec1310e5e6a921601e28158d1
-
SHA256
244cb8aa626e0a7459395548f3e9dd761465212caf1682a82bd7e49bd7554618
-
SHA512
96f9cdd0238ea3e45005f7e991db7f382004648930bf54f006f88adca8c74c9d8d1bb80ddc857853ab08aef5bd2aa4d0f17c6897599e26f35d06db64cb853c62
-
SSDEEP
3072:/ySCR7EjSC039FFClajmDUUAfJ9UnsHTBfPbGS:/QEjSC0NTCZDUBfJ6nsHTBHbG
Behavioral task
behavioral1
Sample
140000.dll
Resource
win7-20221111-en
Malware Config
Extracted
qakbot
404.430
BB12
1675090602
24.9.220.167:443
92.239.81.124:443
12.172.173.82:32101
162.248.14.107:443
213.31.90.183:2222
217.128.200.114:2222
71.31.101.183:443
81.229.117.95:2222
184.68.116.146:2222
86.130.9.183:2222
92.154.45.81:2222
70.64.77.115:443
24.71.120.191:443
86.225.214.138:2222
86.165.225.227:2222
172.90.139.138:2222
92.207.132.174:2222
70.160.80.210:443
58.162.223.233:443
47.61.70.188:2078
119.82.122.226:443
84.35.26.14:995
73.36.196.11:443
24.123.211.131:443
23.251.92.57:2222
208.180.17.32:2222
75.156.125.215:995
47.196.203.73:443
173.178.151.233:443
198.2.51.242:993
103.12.133.134:2222
86.194.156.14:2222
88.126.94.4:50000
75.191.246.70:443
76.80.180.154:995
174.104.184.149:443
12.172.173.82:465
92.154.17.149:2222
77.124.33.54:443
173.18.126.3:443
27.0.48.205:443
197.1.12.81:443
86.250.12.217:2222
93.238.63.3:995
201.244.108.183:995
86.176.37.65:443
72.80.7.6:995
47.34.30.133:443
5.193.24.225:2222
50.68.204.71:993
67.61.71.201:443
49.245.127.223:2222
12.172.173.82:50001
90.162.45.154:2222
87.56.238.53:443
73.165.119.20:443
200.109.207.186:2222
37.14.229.220:2222
12.172.173.82:990
121.121.100.207:995
66.191.69.18:995
74.92.243.113:50000
94.70.92.137:2222
142.119.127.214:2222
181.118.206.65:995
50.68.204.71:995
31.120.202.209:443
41.62.225.148:443
72.88.245.71:443
76.170.252.153:995
184.68.116.146:3389
109.149.148.161:2222
136.35.241.159:443
92.8.190.175:2222
91.68.227.219:443
69.159.158.183:2222
27.109.19.90:2078
206.188.201.143:2222
50.68.204.71:443
69.119.123.159:2222
181.118.183.2:443
172.248.42.122:443
90.78.138.217:2222
83.7.54.167:443
12.172.173.82:2087
75.143.236.149:443
69.133.162.35:443
130.43.172.217:2222
27.99.45.237:2222
125.20.112.94:443
85.59.61.52:2222
47.16.76.122:2222
12.172.173.82:995
79.26.203.25:443
87.202.101.164:50000
86.207.227.152:2222
98.175.176.254:995
105.184.103.7:995
190.249.231.121:443
65.95.85.172:2222
86.172.79.135:443
76.64.202.88:2222
109.11.175.42:2222
89.115.196.99:443
109.148.227.154:443
173.76.49.61:443
175.139.129.94:2222
103.141.50.151:995
183.87.163.165:443
75.98.154.19:443
31.53.29.161:2222
213.67.255.57:2222
85.241.180.94:443
151.65.168.222:443
87.221.197.113:2222
70.77.116.233:443
86.96.72.139:2222
74.214.61.68:443
74.33.196.114:443
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
140000.dll
-
Size
140KB
-
MD5
fb64c12c918b7ad12383a25c846051f7
-
SHA1
52be47d61c97a93ec1310e5e6a921601e28158d1
-
SHA256
244cb8aa626e0a7459395548f3e9dd761465212caf1682a82bd7e49bd7554618
-
SHA512
96f9cdd0238ea3e45005f7e991db7f382004648930bf54f006f88adca8c74c9d8d1bb80ddc857853ab08aef5bd2aa4d0f17c6897599e26f35d06db64cb853c62
-
SSDEEP
3072:/ySCR7EjSC039FFClajmDUUAfJ9UnsHTBfPbGS:/QEjSC0NTCZDUBfJ6nsHTBHbG
-
Loads dropped DLL
-