General
-
Target
2036-59-0x0000000010000000-0x0000000010023000-memory.dmp
-
Size
140KB
-
Sample
230204-3eaqtsfa86
-
MD5
13ee7523ea8225b6c454d3c73875f58c
-
SHA1
684944b609684066cb964e4fb35623e24db4781f
-
SHA256
5c59e800e3058532c7ba1656ab7181a11bbee6c756f01ed38a025247c24e1448
-
SHA512
ea2e01edc27980f06f7b6c8e0099e35e4a733262984103cb0e79ac3b08922b58b382aeedcb12fa158ea099ada5ee86d1af35b918c0272f9229192bddf949ee46
-
SSDEEP
3072:+ySCR7EjSC039FFClajmDUUAfJ9Un9HTBfP9GS9Xl:+QEjSC0NTCZDUBfJ6n9HTBH9GK
Behavioral task
behavioral1
Sample
2036-59-0x0000000010000000-0x0000000010023000-memory.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2036-59-0x0000000010000000-0x0000000010023000-memory.dll
Resource
win10v2004-20220812-en
Malware Config
Extracted
qakbot
404.438
BB12
1675243711
12.172.173.82:2087
95.94.41.77:2222
73.22.121.210:443
200.109.207.186:2222
75.143.236.149:443
69.133.162.35:443
197.148.17.17:2078
82.36.36.76:443
27.0.48.233:443
90.162.45.154:2222
125.20.112.94:443
150.107.231.59:2222
91.82.5.101:443
217.128.91.196:2222
73.161.176.218:443
50.60.157.175:995
190.199.188.186:2222
93.147.235.8:443
183.87.163.165:443
82.121.195.187:2222
62.35.67.88:443
105.186.138.165:995
71.112.212.166:443
86.151.21.134:2222
176.202.38.188:443
85.241.180.94:443
91.68.227.219:443
89.129.109.27:2222
213.31.90.183:2222
213.67.255.57:2222
217.128.200.114:2222
87.243.146.59:443
173.76.49.61:443
24.64.112.40:2222
47.21.51.138:995
175.139.129.94:2222
70.66.199.12:443
162.248.14.107:443
75.98.154.19:443
90.104.22.28:2222
58.247.115.126:995
91.231.173.199:995
116.72.250.18:443
119.82.122.226:443
98.145.23.67:443
202.142.98.62:443
202.142.98.62:995
70.77.116.233:443
74.33.196.114:443
12.172.173.82:20
47.61.70.188:2078
12.172.173.82:995
93.156.100.20:443
92.27.86.48:2222
92.154.45.81:2222
86.207.227.152:2222
136.232.184.134:995
143.159.167.231:2222
171.97.42.67:443
92.136.182.108:2222
91.165.188.74:50000
58.186.75.42:443
156.217.208.137:995
92.154.17.149:2222
27.109.19.90:2078
92.186.69.229:2222
81.151.102.224:443
72.80.7.6:995
65.95.85.172:2222
47.34.30.133:443
50.68.204.71:993
73.165.119.20:443
76.93.147.187:443
91.169.12.198:32100
24.228.132.224:2222
86.96.72.139:2222
103.144.201.53:2078
102.158.37.226:443
84.215.202.22:443
174.104.184.149:443
12.172.173.82:465
86.195.14.72:2222
113.188.252.28:443
109.159.119.95:2222
86.250.12.217:2222
79.9.64.37:995
86.196.12.21:2222
71.31.101.183:443
198.2.51.242:993
86.194.156.14:2222
24.64.112.40:3389
76.80.180.154:995
84.35.26.14:995
12.172.173.82:32101
73.36.196.11:443
81.229.117.95:2222
24.71.120.191:443
47.196.203.73:443
86.225.214.138:2222
103.252.7.228:443
172.90.139.138:2222
181.118.206.65:995
92.207.132.174:2222
103.212.19.254:995
31.167.254.199:995
87.202.101.164:50000
68.150.18.161:443
93.238.63.3:995
201.244.108.183:995
114.143.176.234:443
87.10.205.117:443
176.142.207.63:443
88.126.94.4:50000
173.18.126.3:443
91.254.132.23:443
12.172.173.82:50001
108.2.111.66:995
12.172.173.82:990
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
2036-59-0x0000000010000000-0x0000000010023000-memory.dmp
-
Size
140KB
-
MD5
13ee7523ea8225b6c454d3c73875f58c
-
SHA1
684944b609684066cb964e4fb35623e24db4781f
-
SHA256
5c59e800e3058532c7ba1656ab7181a11bbee6c756f01ed38a025247c24e1448
-
SHA512
ea2e01edc27980f06f7b6c8e0099e35e4a733262984103cb0e79ac3b08922b58b382aeedcb12fa158ea099ada5ee86d1af35b918c0272f9229192bddf949ee46
-
SSDEEP
3072:+ySCR7EjSC039FFClajmDUUAfJ9Un9HTBfP9GS9Xl:+QEjSC0NTCZDUBfJ6n9HTBH9GK
Score1/10 -