General
-
Target
1484-54-0x0000000010000000-0x000000001005F000-memory.dmp
-
Size
380KB
-
Sample
230330-njzhescd79
-
MD5
bc6f5bc13ee2b19bf329dfeb05d75377
-
SHA1
ef9a6af25a10a83e4ac808e49ac19002f023995b
-
SHA256
d4c551dafe068bf1589ce830fdcac4a77a6d8019704a368c0f586e4d47b748db
-
SHA512
eb847e3f0795bb14145ec42d1eeb2498df28ba9afe47d4528b1944a9eca93e0dc6c240c965cfde2c0769fefdbd1f140b7d5b0f3aa789a0cb4c507661d1f363e7
-
SSDEEP
6144:cjAWFXKZwzXpsr4eeHBBPtVYWheeQJGVi+UTB8VphA2:cvFXYwzXmr4NBBPtfhevJWi+UTyjh
Behavioral task
behavioral1
Sample
1484-54-0x0000000010000000-0x000000001005F000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1484-54-0x0000000010000000-0x000000001005F000-memory.dll
Resource
win10v2004-20230221-en
Malware Config
Extracted
qakbot
404.843
BB21
1680106938
94.30.31.47:50000
72.88.245.71:443
136.35.241.159:443
74.92.243.115:50000
47.196.225.236:443
71.46.234.171:443
50.68.204.71:443
78.130.215.67:443
46.64.171.68:443
92.186.69.229:2222
68.173.170.110:8443
75.90.87.37:995
94.30.98.134:32100
24.236.90.196:2078
162.248.14.107:443
72.203.216.98:2222
67.219.197.94:443
78.69.251.252:2222
50.68.204.71:993
174.4.89.3:443
75.143.236.149:443
198.2.51.242:993
213.91.235.146:443
75.90.114.237:995
176.133.4.230:995
12.172.173.82:995
72.134.124.16:443
49.245.95.124:2222
124.246.122.199:2222
88.171.156.150:50000
161.142.103.5:995
93.150.183.229:2222
68.68.170.218:443
98.147.155.235:443
87.243.146.59:443
67.10.2.240:995
47.205.18.103:443
80.42.186.99:2222
85.241.180.94:443
92.98.76.164:2222
91.160.70.68:32100
98.37.25.99:443
76.185.166.168:443
12.172.173.82:20
144.64.226.144:443
70.48.189.240:2222
109.11.175.42:2222
173.178.151.233:443
90.162.45.154:2222
178.175.187.254:443
78.16.156.25:443
75.163.169.141:443
109.146.46.4:50000
27.109.19.90:2078
183.82.107.190:443
86.225.214.138:2222
74.66.134.24:443
98.145.23.67:443
88.126.94.4:50000
90.93.132.149:2222
24.117.237.157:443
200.84.207.143:2222
12.172.173.82:993
71.171.83.69:443
187.199.156.176:32103
186.64.67.57:443
71.38.155.217:443
92.239.81.124:443
70.112.206.5:443
73.161.176.218:443
174.115.79.40:2222
91.254.229.61:443
12.172.173.82:22
149.74.159.67:2222
178.152.121.81:443
201.244.108.183:995
86.97.67.62:2222
72.80.94.230:443
96.87.28.170:2222
95.60.243.24:995
90.165.109.4:2222
81.150.42.123:443
74.93.148.97:995
151.65.57.194:443
47.199.241.39:443
151.62.55.207:443
197.14.148.149:443
202.142.98.62:995
70.51.152.61:2222
73.22.121.210:443
86.195.14.72:2222
98.187.21.2:443
76.27.40.189:443
91.68.227.219:443
213.66.245.200:2222
86.154.216.221:2222
31.48.18.52:443
109.154.254.126:2222
200.109.6.16:2222
37.14.229.220:2222
41.62.180.220:443
109.218.220.228:2222
208.180.17.32:2222
190.28.74.251:443
72.200.109.104:443
67.61.61.31:443
88.164.20.177:21
173.206.86.239:443
94.5.98.77:443
190.218.125.145:443
47.32.78.150:443
90.94.143.158:2222
105.186.191.229:995
184.176.35.223:2222
189.222.64.238:443
88.122.133.88:32100
86.130.9.243:2222
50.68.204.71:995
197.0.59.2:443
209.93.207.224:2222
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
1484-54-0x0000000010000000-0x000000001005F000-memory.dmp
-
Size
380KB
-
MD5
bc6f5bc13ee2b19bf329dfeb05d75377
-
SHA1
ef9a6af25a10a83e4ac808e49ac19002f023995b
-
SHA256
d4c551dafe068bf1589ce830fdcac4a77a6d8019704a368c0f586e4d47b748db
-
SHA512
eb847e3f0795bb14145ec42d1eeb2498df28ba9afe47d4528b1944a9eca93e0dc6c240c965cfde2c0769fefdbd1f140b7d5b0f3aa789a0cb4c507661d1f363e7
-
SSDEEP
6144:cjAWFXKZwzXpsr4eeHBBPtVYWheeQJGVi+UTB8VphA2:cvFXYwzXmr4NBBPtfhevJWi+UTyjh
Score1/10 -