General
-
Target
73472cfc52f2732b933e385ef80b4541191c45c995ce5c42844484c33c9867a3.zip
-
Size
4.2MB
-
Sample
240402-qvv1gsbh24
-
MD5
31ea8eefe051ade554f667c55f583654
-
SHA1
cf25dd77c2a5a475c1329538f5dd7a0d61a7b0e0
-
SHA256
e9296f102513c58c645e790fcf00cc40e166a83fb8ecee15ca4552fc453ce0f8
-
SHA512
d8dfa36086499860496e299f049b48b8244cbf549608552a505696fe8f498b0652bc8c5889f42728f1ef1682d0a4f30e8707c825d804c88da5d43d5148310c49
-
SSDEEP
98304:+xGy1S2uG31B53VzFNcHIJjpHvPc5O2kqblgrzD9h8qX:S42ukFbNKWlvPkO2kqbSr/9hxX
Static task
static1
Behavioral task
behavioral1
Sample
73472cfc52f2732b933e385ef80b4541191c45c995ce5c42844484c33c9867a3.msi
Resource
win7-20240221-en
Malware Config
Extracted
qakbot
tchk08
1706710954
31.210.173.10:443
185.156.172.62:443
185.113.8.123:443
-
camp_date
2024-01-31 14:22:34 +0000 UTC
Targets
-
-
Target
73472cfc52f2732b933e385ef80b4541191c45c995ce5c42844484c33c9867a3.msi
-
Size
5.8MB
-
MD5
483b57478ab379546ae9fbab1c0185fa
-
SHA1
e76211f214c1bcd7eb4ab21478d11a50c31d5da7
-
SHA256
73472cfc52f2732b933e385ef80b4541191c45c995ce5c42844484c33c9867a3
-
SHA512
a06f6a98831454f70413efcb6ca97a96440c07bc65e42a8bbfa6c2a6ae7d5dc666d3b96455acdd98089867b9f5ed0cbd98c69bda1c088eb6f3a6c7d702bcb9c4
-
SSDEEP
98304:mihTySajXEjCVXrepfrULCZf7ACNQB0zmlwXU8ern7beyN:OjjIzULqpQBv17r3eyN
-
Detect Qakbot Payload
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-