General
-
Target
aaa.dll
-
Size
2.3MB
-
Sample
230615-mdxwzafh8z
-
MD5
7ada53924de4e9e245379f3e1252f68d
-
SHA1
dcad9cd77f5f16fd4121339045cbad32d550ebcb
-
SHA256
a82012250cc001f02707c6b5beeb6f6f7f42f23d4adc38eb392207cc810ab58d
-
SHA512
5f77a573c93f559c045e7ccd20e0b69fa90b3c0be7da686cd5bd54aa4e787c2a09846b2575171a6df9cf1887e5da8174a841f36ac6b16efbc6c56ca13efb2d02
-
SSDEEP
49152:xRLJgZWlcDoNojrSH3pCtAPs0irH6sQg3Pt3gO6t:bJoWeDoHH3pIeUPt356t
Static task
static1
Behavioral task
behavioral1
Sample
aaa.dll
Resource
win7-20230220-en
Malware Config
Extracted
qakbot
404.1374
BB32
1686813265
113.11.92.30:443
86.160.253.50:443
151.62.174.154:443
77.86.98.236:443
86.195.14.72:2222
12.172.173.82:2087
67.87.119.216:2078
84.213.236.225:995
70.28.50.223:2078
86.164.33.69:995
58.162.223.233:443
98.4.43.111:443
203.219.204.180:443
79.168.224.165:2222
80.12.88.148:2222
1.221.179.74:443
201.244.108.183:995
2.36.64.159:2078
72.205.104.134:443
74.12.147.242:2083
37.186.59.83:2222
65.30.139.145:995
82.125.44.236:2222
172.115.17.50:443
110.159.115.244:443
82.127.153.75:2222
64.121.161.102:443
187.199.244.117:32103
50.68.186.195:443
96.255.66.51:995
223.166.13.95:995
80.6.50.34:443
116.75.58.53:443
84.215.202.8:443
183.87.163.165:443
142.181.206.222:2222
165.120.244.223:2222
175.156.65.126:2222
109.149.147.195:2222
96.87.28.170:2222
12.172.173.82:995
92.154.17.149:2222
75.109.111.89:443
70.160.67.203:443
88.126.94.4:50000
70.28.50.223:3389
70.28.50.223:32100
24.234.220.88:995
66.241.183.99:443
74.12.147.242:2222
23.234.237.3:443
47.205.25.170:443
12.172.173.82:993
174.4.89.3:443
39.40.59.71:2222
84.35.26.14:995
197.204.215.75:443
135.19.158.248:2222
142.154.32.124:443
67.87.119.216:2083
72.134.124.16:443
24.234.220.88:993
181.230.169.180:443
94.206.4.66:2222
92.9.45.20:2222
86.196.12.21:2222
180.151.13.23:2078
91.169.12.198:32100
12.172.173.82:20
46.246.216.208:995
100.4.182.142:2222
76.16.49.134:443
92.186.69.229:2222
73.29.92.128:443
95.45.50.93:2222
84.216.198.201:6881
60.189.156.185:993
213.91.235.146:443
213.64.33.92:2222
189.223.184.79:443
47.34.30.133:443
70.28.50.223:2087
12.172.173.82:465
188.28.19.84:443
67.219.197.94:443
12.172.173.82:50001
161.142.100.114:995
102.158.231.164:443
217.165.255.105:443
71.12.26.62:443
90.7.72.46:2222
27.0.48.233:443
189.223.76.48:443
41.99.230.1:443
94.204.247.243:443
103.140.174.20:2222
199.27.66.213:443
178.175.187.254:443
223.122.118.123:443
103.141.50.43:995
176.142.207.63:443
12.172.173.82:21
45.2.61.134:3389
162.248.14.107:443
98.147.155.235:443
47.21.51.138:443
77.126.99.230:443
12.172.173.82:32101
24.234.220.88:465
70.28.50.223:1194
78.159.145.7:995
85.61.165.153:2222
38.2.18.164:443
121.121.100.202:995
103.139.242.75:443
104.35.24.154:443
200.112.67.75:32100
81.229.117.95:2222
23.91.184.29:80
Targets
-
-
Target
aaa.dll
-
Size
2.3MB
-
MD5
7ada53924de4e9e245379f3e1252f68d
-
SHA1
dcad9cd77f5f16fd4121339045cbad32d550ebcb
-
SHA256
a82012250cc001f02707c6b5beeb6f6f7f42f23d4adc38eb392207cc810ab58d
-
SHA512
5f77a573c93f559c045e7ccd20e0b69fa90b3c0be7da686cd5bd54aa4e787c2a09846b2575171a6df9cf1887e5da8174a841f36ac6b16efbc6c56ca13efb2d02
-
SSDEEP
49152:xRLJgZWlcDoNojrSH3pCtAPs0irH6sQg3Pt3gO6t:bJoWeDoHH3pIeUPt356t
-
Drops file in System32 directory
-