General
-
Target
4eaaddc6f1a38b9b4f021f556450bc3001615616b96f8d52f3cd665f33e96916
-
Size
402KB
-
Sample
240301-lh5lyafa51
-
MD5
a5a232e8b9b46ce4cb8d1e2fccdf3cae
-
SHA1
f0c5707f0836e667532543ac5c5e4b6676efee6d
-
SHA256
4eaaddc6f1a38b9b4f021f556450bc3001615616b96f8d52f3cd665f33e96916
-
SHA512
1ea6b2d9e8397d246f811ef60993e3bf536a6948e6ea3a459f196bd7e313832e32224c77130858e0e102ad4e2c0dc470ff6259d217d8debb7fde271192a0488c
-
SSDEEP
6144:hVWAE0IMoNmL7x4SVpSabPTeboxqoTkEaWrac:uFNmLKSVpJbPT+4xrN
Static task
static1
Behavioral task
behavioral1
Sample
4eaaddc6f1a38b9b4f021f556450bc3001615616b96f8d52f3cd665f33e96916.dll
Resource
win7-20240221-en
Malware Config
Extracted
qakbot
401.138
obama06
1614154599
98.173.34.213:995
160.3.187.114:443
73.25.124.140:2222
24.50.118.93:443
82.127.125.209:990
83.110.109.106:2222
79.129.121.81:995
189.223.234.23:995
125.63.101.62:443
113.22.175.141:443
172.78.30.215:443
47.146.169.85:443
47.22.148.6:443
76.25.142.196:443
78.63.226.32:443
105.198.236.101:443
75.67.192.125:443
176.181.247.197:443
105.96.8.96:443
108.31.15.10:995
176.205.222.30:2078
115.133.243.6:443
83.110.11.244:2222
195.43.173.70:443
197.51.82.72:443
89.137.211.239:995
105.198.236.99:443
144.139.47.206:443
202.188.138.162:443
24.43.22.218:993
69.58.147.82:2078
157.131.108.180:443
92.59.35.196:2222
195.12.154.8:443
86.160.137.132:443
59.90.246.200:443
96.57.188.174:2222
172.87.157.235:3389
189.211.177.183:995
173.184.119.153:995
50.244.112.106:443
144.139.166.18:443
90.65.236.181:2222
81.150.181.168:2222
68.186.192.69:443
74.222.204.82:995
197.161.154.132:443
38.92.225.121:443
197.45.110.165:995
71.117.132.169:443
85.52.72.32:2222
217.133.54.140:32100
193.248.221.184:2222
95.77.223.148:443
83.110.103.152:443
80.227.5.69:443
209.210.187.52:995
50.29.166.232:995
108.160.123.244:443
24.152.219.253:995
81.97.154.100:443
203.198.96.37:443
80.11.173.82:8443
97.69.160.4:2222
196.151.252.84:443
172.115.177.204:2222
98.121.187.78:443
47.187.108.172:443
216.201.162.158:443
140.82.49.12:443
71.199.192.62:443
71.88.193.17:443
182.48.193.200:443
71.187.170.235:443
77.211.30.202:995
77.27.204.204:995
96.37.113.36:993
187.250.39.162:443
122.148.156.131:995
173.21.10.71:2222
119.153.43.235:3389
71.74.12.34:443
75.118.1.141:443
75.136.26.147:443
67.6.12.4:443
71.197.126.250:443
78.185.59.190:443
125.239.152.76:995
45.46.53.140:2222
98.240.24.57:443
199.19.117.131:443
113.211.120.112:443
74.68.144.202:443
73.153.211.227:443
98.252.118.134:443
189.222.59.177:443
187.250.177.33:995
186.28.55.211:443
189.210.115.207:443
90.101.117.122:2222
72.240.200.181:2222
151.205.102.42:443
24.55.112.61:443
82.12.157.95:995
189.146.183.105:443
72.252.201.69:443
109.12.111.14:443
24.229.150.54:995
209.210.187.52:443
67.8.103.21:443
47.196.192.184:443
24.139.72.117:443
79.115.174.55:443
94.53.92.42:443
86.236.77.68:2222
89.3.198.238:443
213.60.147.140:443
84.247.55.190:8443
2.7.116.188:2222
106.51.85.162:443
87.202.87.210:2222
142.117.191.18:2222
196.221.207.137:995
188.26.91.212:443
108.46.145.30:443
125.209.114.182:995
27.223.92.142:995
173.25.45.66:443
32.210.98.6:443
65.27.228.247:443
108.29.32.251:443
189.223.97.175:443
78.97.207.104:443
181.48.190.78:443
2.232.253.79:995
136.232.34.70:443
207.246.77.75:2222
45.77.115.208:443
207.246.77.75:8443
45.63.107.192:443
45.77.117.108:2222
45.77.117.108:8443
45.77.115.208:995
45.77.117.108:443
144.202.38.185:2222
149.28.98.196:995
144.202.38.185:995
149.28.101.90:8443
149.28.99.97:995
45.32.211.207:995
-
salt
jHxastDcds)oMc=jvh7wdUhxcsdt2
Targets
-
-
Target
4eaaddc6f1a38b9b4f021f556450bc3001615616b96f8d52f3cd665f33e96916
-
Size
402KB
-
MD5
a5a232e8b9b46ce4cb8d1e2fccdf3cae
-
SHA1
f0c5707f0836e667532543ac5c5e4b6676efee6d
-
SHA256
4eaaddc6f1a38b9b4f021f556450bc3001615616b96f8d52f3cd665f33e96916
-
SHA512
1ea6b2d9e8397d246f811ef60993e3bf536a6948e6ea3a459f196bd7e313832e32224c77130858e0e102ad4e2c0dc470ff6259d217d8debb7fde271192a0488c
-
SSDEEP
6144:hVWAE0IMoNmL7x4SVpSabPTeboxqoTkEaWrac:uFNmLKSVpJbPT+4xrN
-
Loads dropped DLL
-