Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
061d59735ea2397cbb2566ddb711d1ea73a79e5f171a6ed5f328c0d8b078c426.zip
-
Size
245KB
-
Sample
250325-esf8rstry2
-
MD5
aab76cd4195fef809763c72944e6c2ff
-
SHA1
b0e9c28d4f1c4a59c1780c7991426c5a7643b959
-
SHA256
061d59735ea2397cbb2566ddb711d1ea73a79e5f171a6ed5f328c0d8b078c426
-
SHA512
4fb8c02ee6237da50ec84ce10e0b98184458dc81495ff4de265c9ebf9a36c3efec1fde032d8d7d50eba2c78cda7557b7fad83de920a969d3b8ecd0726e8538f9
-
SSDEEP
6144:enyEbzn4VwcCC8U5aVFXGfTNQtllCRtradvUeCwMx:eFbz44CzamfT2UrWvMwMx
Behavioral task
behavioral1
Sample
b69f17a7126bf24174e8d6cd594c5ebb28485db8e3943b0cebc5bf1225d6c6ae.dll
Resource
win7-20241010-en
Malware Config
Extracted
qakbot
401.29
abc101
1606331967
76.104.230.174:443
187.227.86.129:995
219.255.28.241:443
78.184.6.94:443
95.159.45.82:443
91.228.36.95:443
79.115.215.125:443
24.244.161.36:443
24.71.28.247:443
73.239.229.107:995
187.153.119.36:443
190.75.167.44:2222
83.110.111.159:443
174.76.21.134:443
75.109.180.221:443
85.122.141.42:995
156.222.6.246:995
188.24.183.193:443
88.106.237.152:2222
79.166.83.103:2222
74.73.27.35:443
200.140.154.174:2222
173.173.1.164:443
89.33.87.107:443
86.97.221.121:443
72.241.205.69:443
196.89.180.164:443
83.110.19.27:443
95.77.223.148:443
47.22.148.6:443
196.204.207.111:443
79.129.121.81:995
98.115.243.237:443
105.198.236.99:443
68.134.181.98:443
69.47.239.10:443
67.82.244.199:2222
2.51.246.190:995
200.75.136.78:443
79.119.20.151:443
31.46.48.119:443
2.86.41.23:2222
108.30.125.94:443
189.210.115.207:443
187.149.129.239:443
84.117.176.32:443
189.141.31.12:443
185.105.131.233:443
95.76.27.6:443
73.56.2.167:443
189.131.107.239:995
68.225.60.77:995
90.174.217.251:2222
68.116.193.239:443
73.166.10.38:995
98.26.50.62:995
95.77.144.238:443
98.4.227.199:443
201.170.194.40:995
174.29.203.226:993
120.150.218.241:995
85.204.189.105:443
67.6.54.180:443
5.15.225.109:443
98.240.24.57:443
216.201.162.158:443
173.197.22.90:2222
217.165.2.92:995
67.8.103.21:443
76.181.122.120:443
174.62.13.151:443
172.87.134.226:443
108.160.123.244:443
50.244.112.106:443
2.7.202.106:2222
187.136.203.196:443
190.220.8.10:995
89.136.39.108:443
24.138.77.61:443
187.213.136.249:995
73.166.10.38:443
85.60.132.8:2087
84.78.128.76:2078
146.199.132.233:2222
24.201.61.153:2078
189.250.115.177:2222
2.190.10.89:995
72.240.200.181:2222
172.114.116.226:995
72.190.101.70:443
109.209.94.165:2222
92.59.35.196:2083
37.107.82.136:443
174.76.11.123:995
72.252.201.69:443
172.116.85.178:443
72.29.181.78:2078
178.223.20.246:995
98.30.44.223:2222
189.231.173.158:443
39.32.125.15:995
185.138.134.150:443
105.198.236.101:443
5.14.152.241:443
149.28.98.196:2222
45.63.107.192:2222
208.93.202.41:443
45.77.193.83:443
93.177.172.131:443
149.28.98.196:443
45.63.107.192:995
5.107.34.225:22
98.199.189.220:61202
149.28.98.196:995
149.28.99.97:443
72.204.242.138:443
149.28.99.97:2222
50.244.112.90:443
182.48.138.42:443
69.123.179.70:443
90.101.62.189:2222
41.228.197.242:443
190.128.215.174:443
188.26.243.119:443
73.248.120.240:443
72.36.59.46:2222
24.152.219.253:995
189.172.247.56:443
199.19.117.131:443
89.137.211.239:443
37.116.152.122:2222
83.202.68.220:2222
216.215.77.18:2078
96.37.113.36:993
92.154.83.96:2222
73.55.254.225:443
24.122.0.90:443
68.192.50.231:443
86.218.67.235:2222
116.240.78.45:995
105.101.216.210:443
77.27.174.49:995
98.121.187.78:443
201.152.69.217:995
75.136.26.147:443
92.137.138.52:2222
71.182.142.63:443
178.87.29.72:443
75.136.40.155:443
201.152.196.4:443
-
salt
jHxastDcds)oMc=jvh7wdUhxcsdt2
Targets
-
-
Target
b69f17a7126bf24174e8d6cd594c5ebb28485db8e3943b0cebc5bf1225d6c6ae.dll
-
Size
2.9MB
-
MD5
e89659fd1e4d75378bdcabb91ffeb66c
-
SHA1
6652f62eccbc1c516ef5911b95ad5b3002a44a9c
-
SHA256
b69f17a7126bf24174e8d6cd594c5ebb28485db8e3943b0cebc5bf1225d6c6ae
-
SHA512
4a848205b0e2748df671959469119d457ab1674b4a3e1aa880ffbd4b374a646f9869e1d75cd1d3ed8f82f507a3447ba5785a6b5de09a296aa2ef647c74c8e8b5
-
SSDEEP
3072:18qk4FRozXKEI7jQC5VrmpL2zqpwAZpDpOal+r:18qkyT7jzGl22pbZJS
-
Qakbot family
-
Loads dropped DLL
-