General
-
Target
me97U.dat
-
Size
860KB
-
Sample
230320-s9baqsgc5y
-
MD5
71af65171b500352fcf6e2e0d35462f2
-
SHA1
8e60346a8f8344cd9e755113b2e94981a2424d68
-
SHA256
c9cca7ebd18e88aa627878060735db234b26104c19fff55aab6b651e35196e33
-
SHA512
2f41ddb99c009ae52f942148068e004308c64972f8d9ef91c228613dd5fa38ba5127da6ae8c9f4446a1729dd7518bc809b3739796ab0f4169495286c27bfdc47
-
SSDEEP
24576:i9sT4ppMP7Empue12E35Tdkq0aljWrHnl5oPhepzGIrx1lA0ijNl:bQOD0nEZAl/iX
Static task
static1
Behavioral task
behavioral1
Sample
me97U.dll
Resource
win7-20230220-en
Malware Config
Extracted
qakbot
404.450
obama244
1679299070
116.75.63.17:443
136.244.25.165:443
184.153.132.82:443
217.165.247.145:2222
35.143.97.145:995
86.98.17.65:443
49.245.95.124:2222
47.34.30.133:443
92.149.250.113:2222
92.186.69.229:2222
86.195.14.72:2222
92.154.45.81:2222
69.119.123.159:2222
64.237.245.195:443
58.186.75.42:443
178.152.121.81:443
12.172.173.82:465
125.99.69.178:443
98.222.212.149:443
175.156.65.126:2222
12.172.173.82:32101
86.208.35.220:2222
2.14.137.60:2222
50.68.186.195:443
88.126.94.4:50000
71.65.145.108:443
80.12.88.148:2222
103.123.223.131:443
151.65.74.186:443
75.143.236.149:443
80.42.186.99:2222
50.68.204.71:993
171.96.204.10:443
157.119.85.203:443
50.68.204.71:443
103.144.201.53:2078
78.69.251.252:2222
109.11.175.42:2222
87.202.101.164:50000
92.159.173.52:2222
73.22.121.210:443
46.65.48.161:443
198.2.51.242:993
92.154.17.149:2222
174.4.89.3:443
90.55.105.42:2222
86.191.9.6:995
73.165.119.20:443
69.133.162.35:443
12.172.173.82:20
74.92.243.113:50000
84.215.202.8:443
162.248.14.107:443
92.239.81.124:443
72.200.109.104:443
174.104.184.149:443
176.224.85.237:995
86.130.9.213:2222
190.11.198.76:443
41.228.211.91:995
213.91.235.146:443
122.184.143.86:443
72.203.216.98:2222
136.232.184.134:995
183.87.163.165:443
220.77.183.218:6881
77.86.98.236:443
49.175.72.7:443
71.171.83.69:443
184.176.110.61:61202
78.159.144.244:995
197.26.144.209:443
82.127.172.214:2222
86.196.12.21:2222
184.176.35.223:2222
91.2.135.211:995
201.244.108.183:995
70.53.96.223:995
24.178.201.230:2222
86.225.214.138:2222
74.66.134.24:443
12.172.173.82:50001
31.48.18.52:443
95.242.101.251:995
12.172.173.82:993
80.76.163.207:2222
12.172.173.82:22
12.172.173.82:2087
98.145.23.67:443
80.1.152.201:443
103.231.216.238:443
103.42.86.110:995
109.49.47.10:80
202.142.98.62:995
78.92.133.215:443
103.252.7.238:443
178.175.187.254:443
109.57.17.199:443
50.68.204.71:995
81.229.117.95:2222
99.253.131.148:443
73.36.196.11:443
70.53.31.142:2222
90.104.22.28:2222
103.141.50.102:995
202.142.98.62:443
70.160.80.210:443
161.142.103.5:995
116.72.250.18:443
119.82.120.175:443
76.80.180.154:995
27.0.48.233:443
12.172.173.82:995
24.117.237.157:443
98.37.25.99:443
47.196.225.236:443
74.58.71.237:443
76.170.252.153:995
103.140.174.19:2222
114.143.176.235:443
Targets
-
-
Target
me97U.dat
-
Size
860KB
-
MD5
71af65171b500352fcf6e2e0d35462f2
-
SHA1
8e60346a8f8344cd9e755113b2e94981a2424d68
-
SHA256
c9cca7ebd18e88aa627878060735db234b26104c19fff55aab6b651e35196e33
-
SHA512
2f41ddb99c009ae52f942148068e004308c64972f8d9ef91c228613dd5fa38ba5127da6ae8c9f4446a1729dd7518bc809b3739796ab0f4169495286c27bfdc47
-
SSDEEP
24576:i9sT4ppMP7Empue12E35Tdkq0aljWrHnl5oPhepzGIrx1lA0ijNl:bQOD0nEZAl/iX
-