General

  • Target

    dump

  • Size

    232KB

  • MD5

    78ebf1acdac12e5855b0a305149a77c7

  • SHA1

    08209879a52b5a08b945577337097c76f776f8cf

  • SHA256

    2032c13190d9347fc677e840f295918ea8f0f8bb17d29a083afe19c1c09d4fd4

  • SHA512

    0922573efa8367247a550ae48fb6e11990bd39c024eb356d60714ff46ebd4cfa84a39acbd53583d625c84f94321d2144ebf2514e5a3c96d2fa14e0add50d30e2

Malware Config

Extracted

Family

qakbot

Botnet

notset

Campaign

1618398961

C2

47.196.192.184:443

216.201.162.158:443

136.232.34.70:443

71.41.184.10:3389

140.82.49.12:443

45.63.107.192:2222

45.63.107.192:443

149.28.98.196:443

45.32.211.207:443

144.202.38.185:443

45.77.115.208:2222

45.77.115.208:8443

207.246.116.237:995

45.77.117.108:443

149.28.99.97:443

149.28.99.97:995

149.28.98.196:995

45.32.211.207:995

45.32.211.207:2222

149.28.98.196:2222

Signatures

Files

  • dump
    .dll windows x86 regsvr32


    Exports