General
-
Target
6a6cb2f1add8817b27b351e9c97fb7067bed9a24038a7a37ece26a7012c6b114
-
Size
260KB
-
Sample
230612-x41ewsea3z
-
MD5
d5916cb2ff52e0411bc80a716b2aa528
-
SHA1
98baa0c511f8595f3a8b28c5ae1d69717b855791
-
SHA256
6a6cb2f1add8817b27b351e9c97fb7067bed9a24038a7a37ece26a7012c6b114
-
SHA512
618ef15305dd64d82e65e81fee659a59313998fab0d493accc122cc6795abbffcf1e31bcb1aff34413706c220777b3834a8f46240e60aca85e8d1d523f990deb
-
SSDEEP
6144:woGZATIJ/rRDAmZ0CI1jp8qTiAS1fW0PBJ+Y:woGGTM/hnZ0VayYv+Y
Static task
static1
Behavioral task
behavioral1
Sample
6a6cb2f1add8817b27b351e9c97fb7067bed9a24038a7a37ece26a7012c6b114.dll
Resource
win7-20230220-en
Malware Config
Extracted
qakbot
404.476
BB20
1679481679
103.111.70.66:995
67.10.2.240:995
78.130.215.67:443
174.4.89.3:443
47.132.248.132:443
92.159.173.52:2222
75.143.236.149:443
80.42.186.99:2222
213.91.235.146:443
73.165.119.20:443
74.92.243.113:50000
12.172.173.82:20
162.248.14.107:443
50.68.204.71:993
92.186.69.229:2222
176.142.207.63:443
109.159.118.229:2222
85.231.105.49:2222
50.68.204.71:443
70.55.67.13:2222
78.69.251.252:2222
198.2.51.242:993
109.11.175.42:2222
70.48.233.117:995
71.171.83.69:443
86.191.9.6:995
102.156.59.50:443
91.165.188.74:50000
72.203.216.98:2222
37.14.229.220:2222
86.97.68.68:2222
200.109.6.16:2222
75.90.114.237:995
202.142.98.62:995
122.184.143.86:443
216.36.153.248:443
86.225.214.138:2222
102.158.208.104:443
88.169.33.180:2222
178.152.121.81:443
12.172.173.82:50001
136.244.25.165:443
45.50.233.214:443
12.172.173.82:993
95.242.101.251:995
190.199.184.114:2222
78.192.109.105:2222
90.78.138.217:2222
88.122.133.88:32100
12.172.173.82:22
98.145.23.67:443
85.241.180.94:443
73.1.85.92:443
2.82.8.80:443
104.35.24.154:443
184.176.35.223:2222
91.2.135.211:995
201.244.108.183:995
100.6.3.139:443
70.160.80.210:443
103.252.7.238:443
178.175.187.254:443
213.67.255.57:2222
197.148.17.17:2078
151.65.74.186:443
74.66.134.24:443
103.111.70.66:443
24.178.201.230:2222
37.186.55.238:2222
80.13.205.69:2222
81.229.117.95:2222
161.142.103.5:995
70.53.31.142:2222
73.36.196.11:443
76.80.180.154:995
202.142.98.62:443
90.104.22.28:2222
12.172.173.82:995
24.117.237.157:443
90.55.106.37:2222
92.27.86.48:2222
35.143.97.145:995
76.170.252.153:995
72.53.103.56:443
2.14.137.211:2222
87.223.92.143:443
86.209.22.193:2222
89.129.109.27:2222
91.68.227.219:443
108.44.207.232:443
223.167.12.241:995
99.253.131.148:443
50.68.204.71:995
2.50.16.41:995
92.154.17.149:2222
73.161.176.218:443
72.200.109.104:443
217.165.246.19:2222
27.0.48.233:443
12.172.173.82:2087
217.165.234.168:443
184.153.132.82:443
49.245.95.124:2222
47.34.30.133:443
86.195.14.72:2222
92.239.81.124:443
217.165.69.89:2222
92.149.250.113:2222
105.186.229.70:995
27.109.19.90:2078
2.237.150.131:2222
69.119.123.159:2222
64.237.245.195:443
174.104.184.149:443
12.172.173.82:465
71.65.145.108:443
69.133.162.35:443
80.12.88.148:2222
12.172.173.82:32101
88.126.94.4:50000
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
6a6cb2f1add8817b27b351e9c97fb7067bed9a24038a7a37ece26a7012c6b114
-
Size
260KB
-
MD5
d5916cb2ff52e0411bc80a716b2aa528
-
SHA1
98baa0c511f8595f3a8b28c5ae1d69717b855791
-
SHA256
6a6cb2f1add8817b27b351e9c97fb7067bed9a24038a7a37ece26a7012c6b114
-
SHA512
618ef15305dd64d82e65e81fee659a59313998fab0d493accc122cc6795abbffcf1e31bcb1aff34413706c220777b3834a8f46240e60aca85e8d1d523f990deb
-
SSDEEP
6144:woGZATIJ/rRDAmZ0CI1jp8qTiAS1fW0PBJ+Y:woGGTM/hnZ0VayYv+Y
-