General
-
Target
78066e01a233c2561c5e79448c21685bc81b2979934af79467dadddda8ffd622.zip
-
Size
122KB
-
Sample
250326-nfr9yasthv
-
MD5
05ed40bd5036f69c0aafa06026f74515
-
SHA1
fefa5261f1f0c18b92581000e4da5907365bb0a1
-
SHA256
78066e01a233c2561c5e79448c21685bc81b2979934af79467dadddda8ffd622
-
SHA512
37d75191bc7aa0b6986885fd524f02ed7e78c7ec7be79e4dbeafaefe0e053285405e49112f162916bc6d62a09a42cfaf68f9bd85c612a52fde6fb265e747921a
-
SSDEEP
3072:/utCCQFVRKqCQX4WnOwwFtZMow8bWUsgwYrkJlnvKj:/n6qRXLnVwFsmbWUsgfMvKj
Static task
static1
Behavioral task
behavioral1
Sample
53df5bb98b96c6a2be5ff6236ab930d8ae6e7ecff953adec7e93c3978c9a81d7.dll
Resource
win7-20240903-en
Malware Config
Extracted
qakbot
401.29
abc101
1606294013
98.115.243.237:443
78.101.21.73:443
185.163.221.77:2222
2.51.246.190:995
2.50.2.11:995
175.137.79.81:443
42.201.228.106:995
185.246.9.69:995
81.133.234.36:2222
24.205.42.241:443
73.239.229.107:995
102.185.58.126:443
173.245.152.231:443
105.101.216.210:443
89.137.195.167:995
174.76.21.134:443
41.238.217.126:6881
47.138.204.19:443
79.166.83.103:2222
92.154.83.96:1194
83.110.111.159:443
203.106.195.67:443
68.225.60.77:995
90.174.217.251:2222
73.166.10.38:995
83.110.226.174:443
109.177.80.59:2222
174.29.203.226:993
122.59.40.31:995
47.22.148.6:443
196.204.207.111:443
105.198.236.99:443
185.105.131.233:443
200.75.136.78:443
2.86.41.23:2222
83.196.50.197:2222
78.96.199.79:443
86.99.134.235:2222
109.106.69.138:2222
59.99.36.38:443
72.204.242.138:443
103.76.160.110:443
59.99.38.33:443
121.58.199.24:443
216.201.162.158:443
173.197.22.90:2222
217.165.2.92:995
83.110.13.182:2222
76.181.122.120:443
94.141.3.242:443
174.62.13.151:443
89.137.211.239:443
2.50.110.49:2078
108.160.123.244:443
120.150.218.241:995
50.244.112.106:443
2.7.202.106:2222
190.220.8.10:995
89.136.39.108:443
73.166.10.38:443
85.60.132.8:2087
87.27.110.90:2222
198.2.35.226:2222
84.78.128.76:2078
120.150.34.178:443
24.201.61.153:2078
217.128.117.218:2222
217.133.54.140:32100
156.205.56.98:995
98.26.50.62:995
172.114.116.226:995
109.209.94.165:2222
72.190.101.70:443
92.59.35.196:2083
37.107.82.136:443
85.132.36.111:2222
174.76.11.123:995
219.74.176.225:443
98.118.156.172:443
94.59.120.142:443
72.29.181.78:2078
178.223.20.246:995
83.110.19.27:443
189.231.173.158:443
45.63.107.192:2222
217.165.1.34:443
149.28.98.196:995
94.52.160.116:443
149.28.99.97:443
45.77.193.83:443
197.161.154.132:443
149.28.99.97:2222
45.63.107.192:995
156.194.226.251:995
42.118.247.172:443
149.28.98.196:2222
105.198.236.101:443
149.28.98.196:443
92.177.56.164:2222
41.97.97.120:443
24.152.219.253:995
37.116.152.122:2222
216.215.77.18:2078
24.122.0.90:443
68.192.50.231:443
73.55.254.225:443
110.53.221.119:443
50.244.112.90:443
178.87.29.72:443
201.152.196.4:443
2.49.219.254:22
71.126.139.251:443
47.44.217.98:443
75.136.40.155:443
93.149.253.201:2222
96.225.88.23:443
166.62.183.139:2078
45.118.65.34:443
50.244.112.10:995
93.146.133.102:2222
96.21.251.127:2222
58.179.21.147:995
90.101.117.122:2222
184.98.97.227:995
77.76.9.40:443
71.10.43.79:443
59.98.96.143:443
86.122.248.164:2222
101.185.175.169:2222
71.187.170.235:443
92.59.35.196:2222
103.102.100.78:2222
188.52.193.110:995
90.175.88.99:2222
37.107.111.46:995
96.237.141.134:995
78.97.3.6:443
2.50.143.154:2078
83.110.220.105:443
109.205.204.229:2222
90.101.62.189:2222
41.228.220.155:443
79.112.110.20:443
190.128.215.174:443
45.32.165.134:443
45.32.162.253:443
140.82.27.132:443
188.26.243.119:443
79.113.247.80:443
73.248.120.240:443
-
salt
jHxastDcds)oMc=jvh7wdUhxcsdt2
Targets
-
-
Target
53df5bb98b96c6a2be5ff6236ab930d8ae6e7ecff953adec7e93c3978c9a81d7.dll
-
Size
255KB
-
MD5
bc8dd25bce1344119cbe6797088e0c5d
-
SHA1
91bdbb0dd6d811d0fdb36c664411feda5e282137
-
SHA256
53df5bb98b96c6a2be5ff6236ab930d8ae6e7ecff953adec7e93c3978c9a81d7
-
SHA512
b379d317a3e66a5eb0b9f6fa119f00ea97a1db5361de3f23669ecf845095c050a0b1cd2dff4e2ce448f8b86eead9e1804985a6e4ea8d1c54914a729b2e37be4e
-
SSDEEP
3072:G3BNzcIx2gLs5VVnvQYyLTUQHPH3MkKiXy4o+4z774L4yFpeQjLrmzht3WaM0X:GfXgB9yLTUQvH3nKiXtozvYpewrkRMI
-
Qakbot family
-
Loads dropped DLL
-