General
-
Target
3be905066595dc785c9b6b98bfb2d9e0478f32df31337a8aeec96d7ccd52769e
-
Size
828KB
-
Sample
240624-k4cydaxgrr
-
MD5
c04e8b163d3b377221a71a04a16bf84c
-
SHA1
99ceee7a93ea9b097301b947bb3afc6c45be39dc
-
SHA256
3be905066595dc785c9b6b98bfb2d9e0478f32df31337a8aeec96d7ccd52769e
-
SHA512
280ec29e5c849380bb586de2a58e019121a8c8b121a519ff4328b77e91c06aecddd8e22cb54116ab67494c79262b930811995076e7e5b3ae0559eaf20b6ea81f
-
SSDEEP
6144:pytjBYoNndfTZ9WA0rTeI4DX+KLJaP8nDEnZjzWGhLX4T2n9HPm+eE8d7+xYM0my:wtzZeXixgP8DmHWEX4T2ZIdKmLjACr
Static task
static1
Behavioral task
behavioral1
Sample
3be905066595dc785c9b6b98bfb2d9e0478f32df31337a8aeec96d7ccd52769e.exe
Resource
win7-20240419-en
Malware Config
Extracted
qakbot
325.43
spx156
1597661994
98.26.50.62:995
46.53.40.244:443
86.98.89.40:2222
108.30.125.94:443
189.130.26.216:443
96.37.113.36:993
216.201.162.158:443
24.37.178.158:443
73.228.1.246:443
175.111.128.234:443
95.77.144.238:443
41.36.58.89:995
84.247.55.190:443
66.215.32.224:443
67.6.3.51:443
197.37.219.90:993
144.202.48.107:443
49.191.130.48:443
73.214.248.17:995
24.44.142.213:2222
24.122.157.93:443
24.46.40.189:2222
68.4.137.211:443
94.176.220.70:2222
193.248.44.2:2222
96.243.35.201:443
47.44.217.98:443
207.255.161.8:995
207.255.161.8:2078
206.51.202.106:50003
189.157.196.112:995
68.60.221.169:465
45.32.154.10:443
207.246.75.201:443
103.238.231.40:443
207.246.71.122:443
217.165.164.57:2222
70.168.130.172:995
78.100.229.44:61201
71.126.139.251:443
64.130.165.255:443
165.120.230.108:2222
67.209.195.198:443
5.13.91.20:995
178.223.1.29:995
80.14.209.42:2222
89.211.114.16:443
24.201.79.208:2078
203.45.65.20:443
41.230.208.10:443
84.126.11.130:443
217.165.115.0:990
79.116.222.141:443
24.139.132.70:443
92.59.35.196:2222
50.244.112.10:995
31.215.99.5:443
108.27.217.44:443
199.116.241.147:443
75.110.250.89:995
50.244.112.106:443
216.163.4.132:443
103.76.160.110:443
81.133.234.36:2222
98.219.77.197:443
98.22.67.68:443
2.51.240.61:995
148.75.231.53:443
80.195.103.146:2222
188.52.119.236:21
144.139.47.206:443
118.168.238.196:443
5.193.155.181:2078
188.25.158.158:443
68.39.160.40:443
108.46.145.30:443
98.190.24.81:443
78.97.207.104:443
197.44.52.8:995
66.26.160.37:443
67.246.16.250:995
95.219.161.222:443
141.158.47.123:443
95.77.223.148:443
39.118.245.6:443
83.110.92.29:443
176.205.255.97:443
98.210.41.34:443
86.98.60.178:443
71.187.170.235:443
41.184.247.243:443
85.122.111.225:443
197.165.161.55:995
75.183.171.155:995
101.108.112.186:443
77.27.173.8:995
213.120.109.73:2222
188.26.244.118:443
73.104.218.229:0
98.121.187.78:443
45.32.155.12:443
66.30.92.147:443
199.247.22.145:443
80.240.26.178:443
24.152.219.253:995
47.206.174.82:443
173.26.189.151:443
12.5.37.3:995
47.180.66.10:443
39.37.227.209:995
96.227.127.13:443
66.222.88.126:995
65.131.64.201:995
47.28.131.209:443
173.173.72.199:443
68.190.152.98:443
174.19.122.177:2222
71.163.224.206:443
173.172.205.216:443
36.226.77.8:443
117.218.208.239:443
65.96.36.157:443
209.182.122.217:443
5.13.110.179:443
185.19.190.81:443
213.67.45.195:2222
99.195.113.171:443
67.165.206.193:993
195.162.106.93:2222
188.240.0.81:443
59.124.10.133:443
72.66.47.70:443
96.20.108.17:2222
209.137.209.163:995
93.151.180.170:61202
79.117.159.68:21
45.77.215.141:443
70.95.118.217:443
24.116.227.63:443
2.89.116.206:995
35.134.202.234:443
203.106.195.67:443
197.210.96.222:995
182.185.99.53:995
166.62.180.194:2078
83.110.6.64:2222
94.59.241.189:2222
108.28.179.42:995
156.213.199.185:443
96.41.93.96:443
Targets
-
-
Target
3be905066595dc785c9b6b98bfb2d9e0478f32df31337a8aeec96d7ccd52769e
-
Size
828KB
-
MD5
c04e8b163d3b377221a71a04a16bf84c
-
SHA1
99ceee7a93ea9b097301b947bb3afc6c45be39dc
-
SHA256
3be905066595dc785c9b6b98bfb2d9e0478f32df31337a8aeec96d7ccd52769e
-
SHA512
280ec29e5c849380bb586de2a58e019121a8c8b121a519ff4328b77e91c06aecddd8e22cb54116ab67494c79262b930811995076e7e5b3ae0559eaf20b6ea81f
-
SSDEEP
6144:pytjBYoNndfTZ9WA0rTeI4DX+KLJaP8nDEnZjzWGhLX4T2n9HPm+eE8d7+xYM0my:wtzZeXixgP8DmHWEX4T2ZIdKmLjACr
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-