Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

19/04/2023, 15:23

230419-ssstfsbd34 3

19/04/2023, 13:39

230419-qyfd7sag78 10

General

  • Target

    b0r1sCantMakeUphisMind.dll

  • Size

    977KB

  • Sample

    230419-qyfd7sag78

  • MD5

    57a01187097a9f0bc4bbb77a50f9d9f8

  • SHA1

    576463418b6813334b58a0dc19c2aa05bc3cea91

  • SHA256

    7783fb922abee77ebc12618187fe164cf8beecbedf4e8e91ad08434ccacc929b

  • SHA512

    6a7d740e0da849b8ab720e097cc5052ab12af47b2e79687e22edf8cae2115d6bfc9078d9fc4ccc4efe6e8c9703783ae8420ed49a5476f72dbdb3c1173c801bd8

  • SSDEEP

    12288:dIAETyZizswDZr2rnVed8b2NFCKh6RaG7EeDATbURJTdL7K2Lzla:dI3AwDj02Nlh6IG7EeYU7TVW2Lzla

Malware Config

Extracted

Family

qakbot

Version

404.981

Botnet

BB24

Campaign

1681731194

C2

198.2.51.242:993

87.221.196.82:2222

27.109.19.90:2078

125.99.69.178:443

84.216.198.124:6881

82.131.135.172:443

82.11.242.219:443

41.228.47.155:995

114.143.176.235:443

47.21.51.138:443

109.146.76.176:2222

174.4.89.3:443

12.172.173.82:32101

92.27.86.48:2222

79.77.142.22:2222

64.121.161.102:443

70.28.50.223:1194

72.205.104.134:443

49.245.95.124:2222

197.2.225.108:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      b0r1sCantMakeUphisMind.dll

    • Size

      977KB

    • MD5

      57a01187097a9f0bc4bbb77a50f9d9f8

    • SHA1

      576463418b6813334b58a0dc19c2aa05bc3cea91

    • SHA256

      7783fb922abee77ebc12618187fe164cf8beecbedf4e8e91ad08434ccacc929b

    • SHA512

      6a7d740e0da849b8ab720e097cc5052ab12af47b2e79687e22edf8cae2115d6bfc9078d9fc4ccc4efe6e8c9703783ae8420ed49a5476f72dbdb3c1173c801bd8

    • SSDEEP

      12288:dIAETyZizswDZr2rnVed8b2NFCKh6RaG7EeDATbURJTdL7K2Lzla:dI3AwDj02Nlh6IG7EeYU7TVW2Lzla

MITRE ATT&CK Enterprise v6

Tasks