General
-
Target
x
-
Size
358KB
-
Sample
230515-vramlagf26
-
MD5
274f5342dc27d798e2fc8873ce40e99f
-
SHA1
dffcc060115248237cd90c1cf3a23d2631db136e
-
SHA256
34a9e75937568a00ef684efff6985251b7b9d9c65159c756ea7e9d4eb665d9ab
-
SHA512
fc036ed531ca9afda2419f9da4b664be4e04ebc5200f33a2d1d8f46a37b15583e692c00b7f1302a70fad2a129fbefe886ec91599c9fd12adc0318581eda8b4d8
-
SSDEEP
6144:a/D0Hb7UDqr1yb1tux77q/Mt12SF7GhUdHMGMIvHQgx77QxxgHb9VnpTBJjT8UZ:oD0Hb7L1yb1tux77q/MW6uIvwO77cgHa
Static task
static1
Behavioral task
behavioral1
Sample
x.dll
Resource
win7-20230220-en
Malware Config
Extracted
qakbot
404.1038
obama263
1684141535
103.140.174.20:2222
91.75.114.200:443
102.156.218.92:443
91.2.143.185:995
90.165.109.4:2222
85.152.152.46:443
182.185.181.202:995
65.190.242.244:443
122.186.210.254:443
58.162.223.233:443
98.145.23.67:443
41.186.88.38:443
139.226.47.229:995
12.172.173.82:993
197.148.17.17:2078
43.243.215.210:443
178.152.124.169:443
50.68.204.71:443
217.165.234.249:443
116.74.164.93:443
184.153.132.82:443
69.133.162.35:443
162.248.14.107:443
50.68.204.71:995
186.64.67.41:443
89.114.140.100:443
109.50.128.59:2222
12.172.173.82:2087
92.20.204.198:2222
79.26.184.19:443
35.143.97.145:995
161.142.98.36:995
27.109.19.90:2078
174.4.89.3:443
73.29.92.128:443
103.123.223.171:443
173.22.114.208:443
70.160.67.203:443
12.172.173.82:22
47.149.248.80:443
40.134.85.217:443
71.38.155.217:443
86.176.16.18:443
125.99.76.102:443
79.77.142.22:2222
66.191.69.18:995
178.175.187.254:443
76.170.252.153:995
176.142.207.63:443
85.104.98.64:443
87.243.146.59:443
70.28.50.223:2078
76.86.31.59:443
71.78.95.86:995
92.9.45.20:2222
198.2.51.242:993
81.229.117.95:2222
92.98.159.9:2222
202.184.123.13:443
201.244.108.183:995
72.205.104.134:443
50.68.186.195:443
103.87.128.228:443
90.104.151.37:2222
12.172.173.82:20
70.28.50.223:2083
92.27.86.48:2222
157.119.85.203:443
122.184.143.86:443
186.75.103.188:443
72.134.124.16:443
99.230.89.236:2078
102.157.7.1:443
112.222.83.147:6881
67.10.9.125:995
184.182.66.109:443
76.178.148.107:2222
92.154.17.149:2222
47.34.30.133:443
41.227.211.88:443
74.92.243.115:50000
70.112.206.5:443
213.91.235.146:443
171.96.192.178:443
105.99.20.0:443
147.219.4.194:443
188.28.72.118:443
78.130.215.67:443
93.147.235.8:443
103.144.201.56:2078
82.127.153.75:2222
69.242.31.249:443
78.19.1.196:443
14.192.241.76:995
151.51.224.231:443
96.56.197.26:2083
86.244.255.82:2222
92.186.69.229:2222
80.76.163.212:2222
47.205.25.170:443
12.172.173.82:465
50.68.204.71:993
173.88.135.179:443
77.86.98.236:443
75.143.236.149:443
70.50.83.139:2222
84.35.26.14:995
12.172.173.82:21
74.33.196.114:443
108.190.115.159:443
47.21.51.138:443
84.215.202.8:443
76.16.49.134:443
113.11.92.30:443
98.19.234.243:995
197.14.208.59:443
88.126.94.4:50000
24.69.137.232:2222
70.28.50.223:32100
184.176.35.223:2222
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
x
-
Size
358KB
-
MD5
274f5342dc27d798e2fc8873ce40e99f
-
SHA1
dffcc060115248237cd90c1cf3a23d2631db136e
-
SHA256
34a9e75937568a00ef684efff6985251b7b9d9c65159c756ea7e9d4eb665d9ab
-
SHA512
fc036ed531ca9afda2419f9da4b664be4e04ebc5200f33a2d1d8f46a37b15583e692c00b7f1302a70fad2a129fbefe886ec91599c9fd12adc0318581eda8b4d8
-
SSDEEP
6144:a/D0Hb7UDqr1yb1tux77q/Mt12SF7GhUdHMGMIvHQgx77QxxgHb9VnpTBJjT8UZ:oD0Hb7L1yb1tux77q/MW6uIvwO77cgHa
-