General
-
Target
1744-55-0x00000000001A0000-0x00000000001C4000-memory.dmp
-
Size
144KB
-
Sample
240305-gwzkmahb84
-
MD5
2669cad0371eb6cbb30cf7f86d014860
-
SHA1
1e4bc3a83e6af10278c4acf2dd2d0840aad8c1df
-
SHA256
af89c96fe21fc9d13a05e7c1fb400ed511dd18e6a956f36547ea87ef506e81e4
-
SHA512
1d784d2e3eb5afb4cf2164d2df50e03b21c62548c0848e6b99382b57a0b11b943699cb1b2babedc3c3db6b576d87a7c5179351f392134aaa9d687a80347fcdf8
-
SSDEEP
3072:yna0+BXiKUAb+437jTAmLJ12/ekTBfPQWpnP:E+BShAq43vUaJY/ekTBH
Behavioral task
behavioral1
Sample
1744-55-0x00000000001A0000-0x00000000001C4000-memory.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1744-55-0x00000000001A0000-0x00000000001C4000-memory.dll
Resource
win10v2004-20240226-en
Malware Config
Extracted
qakbot
404.919
obama252
1681377757
70.28.50.223:2083
64.121.161.102:443
95.60.243.84:995
70.28.50.223:1194
49.245.95.124:2222
184.153.132.82:443
67.219.197.94:443
174.4.89.3:443
70.28.50.223:3389
213.91.235.146:443
75.115.14.189:443
202.142.98.62:443
70.64.77.115:443
70.28.50.223:2087
103.123.223.141:443
50.68.204.71:993
81.229.117.95:2222
72.134.124.16:443
76.170.252.153:995
85.245.221.87:2078
92.239.81.124:443
71.31.232.65:995
99.228.131.116:2222
122.184.143.83:443
43.243.215.210:443
50.68.204.71:443
50.68.186.195:443
213.67.139.53:2222
90.78.147.141:2222
41.230.171.196:443
86.176.144.145:2222
75.143.236.149:443
198.2.51.242:993
69.133.162.35:443
24.236.90.196:2078
161.142.103.5:995
91.169.12.198:32100
47.21.51.138:443
35.143.97.145:995
12.172.173.82:32101
92.20.204.198:2222
103.42.86.42:995
136.175.69.147:443
116.72.250.18:443
123.3.240.16:995
116.74.164.235:443
136.244.25.165:443
109.50.143.218:2222
86.45.66.141:2222
87.200.170.30:443
46.64.171.68:443
100.6.31.96:443
184.176.35.223:2222
23.30.22.225:50003
79.77.142.22:2222
124.149.143.189:2222
12.172.173.82:20
82.212.107.207:443
125.99.69.178:443
212.70.98.78:2222
74.66.134.24:443
122.186.210.254:443
23.30.22.225:443
74.102.98.63:2222
90.104.151.37:2222
84.155.13.118:995
77.126.185.173:443
98.145.23.67:443
162.248.14.107:443
12.172.173.82:993
93.150.183.229:2222
70.112.206.5:443
24.206.27.39:443
81.101.185.146:443
109.151.87.122:443
92.9.45.20:2222
90.55.106.37:2222
76.178.148.107:2222
75.109.111.89:443
201.244.108.183:995
47.205.25.170:443
92.27.86.48:2222
71.171.83.69:443
12.172.173.82:2087
71.38.155.217:443
172.90.139.138:2222
103.111.70.66:443
72.203.216.98:2222
12.172.173.82:50001
157.119.85.203:443
12.172.173.82:22
125.99.76.102:443
112.222.83.147:6881
85.2.185.70:2222
12.172.173.82:995
92.189.214.236:2222
85.61.165.153:2222
2.36.64.159:2078
75.149.21.157:443
78.159.147.45:995
86.225.214.138:2222
88.126.94.4:50000
41.186.88.38:443
77.86.98.236:443
88.122.133.88:32100
91.165.188.74:50000
74.92.243.115:50000
68.229.150.95:443
114.143.176.235:443
103.113.68.33:443
103.144.201.56:2078
89.129.109.27:2222
151.65.213.208:443
151.62.160.232:443
90.70.150.94:2222
24.139.11.137:443
184.182.66.109:443
23.30.22.225:993
209.216.123.118:3389
119.82.123.160:443
-
salt
SoNuce]ugdiB3c[doMuce2s81*uXmcvP
Targets
-
-
Target
1744-55-0x00000000001A0000-0x00000000001C4000-memory.dmp
-
Size
144KB
-
MD5
2669cad0371eb6cbb30cf7f86d014860
-
SHA1
1e4bc3a83e6af10278c4acf2dd2d0840aad8c1df
-
SHA256
af89c96fe21fc9d13a05e7c1fb400ed511dd18e6a956f36547ea87ef506e81e4
-
SHA512
1d784d2e3eb5afb4cf2164d2df50e03b21c62548c0848e6b99382b57a0b11b943699cb1b2babedc3c3db6b576d87a7c5179351f392134aaa9d687a80347fcdf8
-
SSDEEP
3072:yna0+BXiKUAb+437jTAmLJ12/ekTBfPQWpnP:E+BShAq43vUaJY/ekTBH
Score1/10 -