General
-
Target
FfYIJfx.dat.dll
-
Size
276KB
-
Sample
230331-rt355sbb69
-
MD5
35886785d255217c90ac1ad00a91d983
-
SHA1
d98c8159dac6f16e1c227dd6d81f7d2d46cb6865
-
SHA256
2d101cb5e071b57f48d93ad4cf1caa07199693d8073802209e6bf6e5a9188eb9
-
SHA512
7626b80f3d9d8fb3c024c898c427119ea5d64ab7019958dadd5fba1210b408933919eb97a303942f9801e76d21845556329b8a419dd5f9ccba4445b52938b20e
-
SSDEEP
6144:tIp4Y1c1tGUGHGJksYOFGwTwRqWzUTMfVHqpdtIO:tIp4Y1vHGJNtF5TwRqWzU9dN
Static task
static1
Behavioral task
behavioral1
Sample
FfYIJfx.dat.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
FfYIJfx.dat.dll
Resource
win10v2004-20230220-en
Malware Config
Extracted
qakbot
404.909
obama247
1680268923
45.50.233.214:443
91.160.70.68:32100
47.21.51.138:443
72.200.109.104:443
49.245.95.124:2222
12.172.173.82:32101
50.68.204.71:443
92.136.51.189:2222
35.143.97.145:995
84.35.26.14:995
77.86.98.236:443
92.154.17.149:2222
76.170.252.153:995
12.172.173.82:2087
104.35.24.154:443
184.153.132.82:443
47.34.30.133:443
176.133.4.230:995
78.16.156.25:443
81.229.117.95:2222
74.92.243.115:50000
174.118.63.123:443
125.99.76.102:443
37.14.229.220:2222
84.216.198.124:6881
12.172.173.82:21
70.51.153.108:2222
172.115.17.50:443
12.172.173.82:465
197.204.216.170:443
69.133.162.35:443
65.94.84.173:2222
109.159.119.176:2222
78.69.251.252:2222
109.218.244.210:2222
24.236.90.196:2078
78.92.133.215:443
87.202.101.164:50000
78.218.230.28:443
213.66.245.200:2222
86.130.9.243:2222
27.109.19.90:2078
72.88.245.71:443
197.0.175.118:443
103.140.174.20:2222
136.35.241.159:443
78.192.109.105:2222
86.98.23.66:443
12.172.173.82:995
72.134.124.16:443
94.30.31.47:50000
67.219.197.94:443
161.142.103.5:995
93.150.183.229:2222
86.143.119.184:995
67.10.2.240:995
80.42.186.99:2222
85.241.180.94:443
12.172.173.82:20
162.248.14.107:443
27.99.32.26:2222
72.203.216.98:2222
116.72.250.18:443
84.155.13.118:995
116.74.163.227:443
50.68.204.71:993
75.143.236.149:443
174.4.89.3:443
86.97.67.62:2222
198.2.51.242:993
70.48.189.240:2222
213.91.235.146:443
75.90.114.237:995
200.84.207.143:2222
90.93.132.149:2222
24.117.237.157:443
45.243.143.141:995
31.48.18.52:443
92.97.45.55:2222
91.68.227.219:443
66.35.127.94:2222
173.178.151.233:443
47.132.248.132:443
151.65.57.194:443
71.31.100.192:443
217.165.69.89:2222
47.16.74.194:2222
178.175.187.254:443
71.38.155.217:443
70.112.206.5:443
178.152.121.81:443
103.113.68.33:443
201.244.108.183:995
94.30.98.134:32100
96.87.28.170:2222
87.223.92.143:443
95.60.243.24:995
92.186.32.33:2222
81.150.42.123:443
86.225.214.138:2222
2.237.150.131:2222
74.66.134.24:443
98.145.23.67:443
85.231.105.49:2222
82.155.108.153:443
12.172.173.82:993
71.171.83.69:443
142.126.173.85:2222
47.149.137.40:443
151.62.55.207:443
176.142.207.63:443
41.228.56.8:995
86.154.216.221:2222
2.98.147.157:995
119.82.123.160:443
184.161.74.73:443
12.172.173.82:50001
174.58.146.57:443
202.142.98.62:443
209.93.207.224:2222
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
FfYIJfx.dat.dll
-
Size
276KB
-
MD5
35886785d255217c90ac1ad00a91d983
-
SHA1
d98c8159dac6f16e1c227dd6d81f7d2d46cb6865
-
SHA256
2d101cb5e071b57f48d93ad4cf1caa07199693d8073802209e6bf6e5a9188eb9
-
SHA512
7626b80f3d9d8fb3c024c898c427119ea5d64ab7019958dadd5fba1210b408933919eb97a303942f9801e76d21845556329b8a419dd5f9ccba4445b52938b20e
-
SSDEEP
6144:tIp4Y1c1tGUGHGJksYOFGwTwRqWzUTMfVHqpdtIO:tIp4Y1vHGJNtF5TwRqWzU9dN
-