General
-
Target
9ae4ca867bf51bb444764ef69bf9f71b7e4411aeeff3c6388015e4ef8ce498d4.exe
-
Size
1.6MB
-
Sample
241124-kr4kkasngz
-
MD5
ff425f6755c73ea16792dd61bd9e45ae
-
SHA1
a32b9a5946d139fb417bccc157656f37c3436d44
-
SHA256
9ae4ca867bf51bb444764ef69bf9f71b7e4411aeeff3c6388015e4ef8ce498d4
-
SHA512
8218c4c2852da4351d8d28063605b2c23036e99d6983c62873067656f15e718be7a70c83584a2e352fbc738cf532c0f24fd565e4dc77d7418fa2ff1d04badbdd
-
SSDEEP
24576:F9mB+XxJ7zUqNS8KqCx2ffNrC0O60+bPzTk1wK7TpKsZ3:FUBav7zbS8pCx2fftCv6JLwJ7FKsZ3
Static task
static1
Behavioral task
behavioral1
Sample
9ae4ca867bf51bb444764ef69bf9f71b7e4411aeeff3c6388015e4ef8ce498d4.dll
Resource
win7-20240903-en
Malware Config
Extracted
qakbot
402.363
tr
1634541613
120.150.218.241:995
24.119.214.7:443
103.143.8.71:443
81.241.252.59:2078
81.250.153.227:2222
174.54.193.186:443
73.52.50.32:443
39.49.122.240:995
86.220.112.26:2222
103.82.211.39:465
78.191.38.33:995
216.201.162.158:443
181.118.183.94:443
66.177.215.152:0
208.78.220.143:443
94.200.181.154:443
136.232.34.70:443
136.143.11.232:443
81.213.59.22:443
103.82.211.39:990
38.70.253.226:2222
98.203.26.168:443
199.27.127.129:443
31.167.109.100:443
93.48.58.123:2222
136.232.254.46:995
65.100.174.110:995
176.45.53.222:443
220.255.25.28:2222
91.178.126.51:995
37.210.155.239:995
105.198.236.99:995
117.215.228.151:443
129.208.61.171:995
115.96.64.9:995
196.207.140.40:995
76.25.142.196:443
24.231.209.2:2222
146.66.238.74:443
140.82.49.12:443
103.82.211.39:995
65.100.174.110:443
103.142.10.177:443
41.86.42.158:995
71.74.12.34:443
174.76.17.43:443
96.37.113.36:993
173.25.162.221:443
89.137.52.44:443
189.135.16.92:443
67.165.206.193:993
86.8.177.143:443
73.151.236.31:443
213.60.210.85:443
173.21.10.71:2222
89.101.97.139:443
45.46.53.140:2222
75.188.35.168:443
109.12.111.14:443
187.75.66.160:995
86.152.43.219:443
39.33.163.183:995
47.40.196.233:2222
187.149.227.40:443
167.248.117.81:443
78.105.213.151:995
197.89.6.10:443
41.228.22.180:443
116.193.136.10:443
122.179.158.212:443
103.148.120.144:443
77.57.204.78:443
182.176.180.73:443
103.82.211.39:993
63.143.92.99:995
117.202.161.73:2222
72.173.78.211:443
187.156.169.68:443
65.100.174.110:8443
189.146.41.71:443
68.204.7.158:443
65.100.174.110:6881
69.30.186.190:443
189.147.159.42:443
190.117.91.214:443
181.4.53.6:465
201.172.31.95:80
72.252.201.69:995
174.206.106.137:443
39.40.37.70:32100
187.172.199.200:443
24.139.72.117:443
24.229.150.54:995
2.222.167.138:443
37.117.191.19:2222
39.52.206.119:995
80.6.192.58:443
27.223.92.142:995
68.186.192.69:443
122.60.71.201:995
173.22.178.66:443
50.194.160.233:32100
50.194.160.233:465
24.55.112.61:443
2.221.12.60:443
201.68.60.118:995
50.194.160.233:995
65.100.174.110:32103
123.201.44.86:6881
177.76.251.27:995
67.230.44.194:443
109.200.192.84:443
73.230.205.91:443
27.59.32.229:443
189.252.137.204:32101
136.232.254.46:443
95.159.33.115:995
115.96.62.113:443
85.60.147.26:2078
75.131.217.182:443
85.60.147.26:2222
129.35.116.77:990
68.117.229.117:443
83.110.201.195:443
103.250.38.115:443
117.198.158.234:443
185.250.148.74:443
82.43.184.158:443
111.125.245.116:443
124.123.42.115:2222
189.252.166.130:32101
82.178.55.68:443
187.149.255.245:443
72.252.32.47:443
24.231.209.2:8443
105.242.94.246:995
24.231.209.2:50000
24.231.209.2:1194
24.107.165.50:443
50.194.160.233:993
50.194.160.233:22
24.231.209.2:2083
-
salt
jHxastDcds)oMc=jvh7wdUhxcsdt2
Targets
-
-
Target
9ae4ca867bf51bb444764ef69bf9f71b7e4411aeeff3c6388015e4ef8ce498d4.exe
-
Size
1.6MB
-
MD5
ff425f6755c73ea16792dd61bd9e45ae
-
SHA1
a32b9a5946d139fb417bccc157656f37c3436d44
-
SHA256
9ae4ca867bf51bb444764ef69bf9f71b7e4411aeeff3c6388015e4ef8ce498d4
-
SHA512
8218c4c2852da4351d8d28063605b2c23036e99d6983c62873067656f15e718be7a70c83584a2e352fbc738cf532c0f24fd565e4dc77d7418fa2ff1d04badbdd
-
SSDEEP
24576:F9mB+XxJ7zUqNS8KqCx2ffNrC0O60+bPzTk1wK7TpKsZ3:FUBav7zbS8pCx2fftCv6JLwJ7FKsZ3
-
Qakbot family
-
Loads dropped DLL
-