General
-
Target
1448-54-0x0000000010000000-0x0000000010023000-memory.dmp
-
Size
140KB
-
Sample
240302-wcq7gaff4x
-
MD5
4973e7a918a6e0213643607c5a1cd5f6
-
SHA1
8db5ed13fe790a02c0e59d69bc056e675270bb74
-
SHA256
97fecdf6b1ef1a0dfac6b8ee72330ad5393b33290067b443c62315ab9885e2ae
-
SHA512
8f7057f1b4a55fdabe39a7b9bb636e7c92e2874ccbd0284fbf9f31ef442f5c30b725789bb37fe378881b7fc09766b01002c0633da25671e60813fb4d735a1a51
-
SSDEEP
3072:eaYogKI1keZwRYc/XCggn9wSAUJ2yn3zwTBfP1W8LEN:efZwR1Cgg9w3UJHn3zwTBH1S
Behavioral task
behavioral1
Sample
1448-54-0x0000000010000000-0x0000000010023000-memory.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1448-54-0x0000000010000000-0x0000000010023000-memory.dll
Resource
win10v2004-20240226-en
Malware Config
Extracted
qakbot
404.246
BB19
1678774690
81.229.117.95:2222
67.248.21.32:443
47.34.30.133:443
49.175.72.7:443
76.80.180.154:995
24.117.237.157:443
35.143.97.145:995
92.1.170.110:995
105.186.229.59:995
183.87.163.165:443
76.170.252.153:995
136.232.184.134:995
86.10.146.216:443
109.158.144.102:995
50.68.204.71:995
80.1.152.201:443
71.65.145.108:443
12.172.173.82:465
72.80.7.6:50003
184.153.132.82:443
94.200.183.66:2222
98.37.25.99:443
49.245.82.178:2222
12.172.173.82:32101
64.237.245.195:443
103.231.216.238:443
74.93.148.97:995
103.71.20.249:443
174.104.184.149:443
73.165.119.20:443
102.159.236.172:443
93.147.134.85:443
162.248.14.107:443
50.68.186.195:443
50.68.204.71:443
74.92.243.113:50000
80.42.186.99:2222
85.84.119.210:993
108.190.203.42:995
178.153.2.76:443
174.4.89.3:443
12.172.173.82:990
172.90.139.138:2222
198.2.51.242:993
98.145.23.67:443
46.10.198.134:443
84.35.26.14:995
187.199.103.21:32103
50.68.204.71:993
75.143.236.149:443
91.169.12.198:32100
88.126.94.4:50000
24.239.69.244:443
12.172.173.82:21
83.92.85.93:443
69.133.162.35:443
12.172.173.82:20
103.141.50.102:995
103.111.70.115:443
116.72.250.18:443
27.0.48.233:443
180.151.104.240:443
202.142.98.62:443
202.142.98.62:995
103.140.174.19:2222
103.252.7.231:443
70.53.96.223:995
12.172.173.82:993
12.172.173.82:22
212.70.98.141:2222
58.162.223.233:443
72.203.216.98:2222
59.28.84.65:443
86.166.76.246:443
12.172.173.82:995
173.18.126.3:443
201.244.108.183:995
24.178.201.230:2222
184.176.110.61:61202
116.75.63.66:443
2.49.58.47:2222
217.165.232.217:443
217.165.247.145:2222
103.123.223.144:443
86.225.214.138:2222
74.66.134.24:443
12.172.173.82:50001
202.187.87.178:995
67.10.175.47:2222
90.55.105.42:2222
190.191.35.122:443
58.186.75.42:443
84.216.198.124:6881
90.104.22.28:2222
92.159.173.52:2222
103.111.70.115:995
103.144.201.53:2078
220.77.183.218:6881
5.192.141.187:2222
68.173.170.110:8443
27.0.48.205:443
103.212.19.254:995
174.21.72.135:2222
114.143.176.235:443
115.87.227.49:443
188.176.171.3:443
104.35.24.154:443
122.184.143.84:443
47.196.225.236:443
12.172.173.82:2087
184.176.35.223:2222
73.161.176.218:443
72.200.109.104:443
70.50.3.214:2222
24.253.221.86:443
108.44.207.232:443
51.175.92.253:443
113.163.0.126:443
174.58.146.57:443
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
1448-54-0x0000000010000000-0x0000000010023000-memory.dmp
-
Size
140KB
-
MD5
4973e7a918a6e0213643607c5a1cd5f6
-
SHA1
8db5ed13fe790a02c0e59d69bc056e675270bb74
-
SHA256
97fecdf6b1ef1a0dfac6b8ee72330ad5393b33290067b443c62315ab9885e2ae
-
SHA512
8f7057f1b4a55fdabe39a7b9bb636e7c92e2874ccbd0284fbf9f31ef442f5c30b725789bb37fe378881b7fc09766b01002c0633da25671e60813fb4d735a1a51
-
SSDEEP
3072:eaYogKI1keZwRYc/XCggn9wSAUJ2yn3zwTBfP1W8LEN:efZwR1Cgg9w3UJHn3zwTBH1S
Score1/10 -