General

  • Target

    triage2

  • Size

    217KB

  • MD5

    9a44b520e760d8b33f4e949798c66d91

  • SHA1

    a8ce027ac22e6a922149296de6e3ebaca24c7285

  • SHA256

    0d18ffaf66e43bb43939c0970a2ae2927470485036e068f7886dabaab217256d

  • SHA512

    f06a953e88012f843958d9cb1678a8fcd2f6aea636b298dffc3e2d2c1bbc2338d1c0108bdf9a8bcbe77a09a37a48f4290009e3be7bdd31b9ced45d33b5b7f96b

Malware Config

Extracted

Family

qakbot

Botnet

notset

Campaign

1618398961

C2

47.196.192.184:443

216.201.162.158:443

136.232.34.70:443

71.41.184.10:3389

140.82.49.12:443

45.63.107.192:2222

45.63.107.192:443

149.28.98.196:443

45.32.211.207:443

144.202.38.185:443

45.77.115.208:2222

45.77.115.208:8443

207.246.116.237:995

45.77.117.108:443

149.28.99.97:443

149.28.99.97:995

149.28.98.196:995

45.32.211.207:995

45.32.211.207:2222

149.28.98.196:2222

Signatures

Files

  • triage2
    .dll windows x86 regsvr32


    Exports