General

  • Target

    5646697885368320.zip

  • Size

    153KB

  • MD5

    1ed2b97f55a70bdf1db0a90e88cc993c

  • SHA1

    01ed27d6986bb59d9eb940d523e13fcffa0d1d76

  • SHA256

    7ed63d34c33a09c5579ea306c2beaee83ce36ea428a84b5d33a43ed112f46a3e

  • SHA512

    e6b4be39188097df50f9bb33f267d53cb753d498e1ffb449297e4585395bddc99a4a3c075191152731625da76426e9802855ed6a4584b704456cc7705783f13f

Score
10/10

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

tr

Campaign

1619706851

C2

24.117.107.120:443

190.85.91.154:443

72.252.201.69:443

189.210.115.207:443

71.41.184.10:3389

81.97.154.100:443

50.29.166.232:995

140.82.49.12:443

75.137.47.174:443

71.74.12.34:443

73.25.124.140:2222

149.28.99.97:2222

45.77.115.208:2222

45.32.211.207:995

207.246.116.237:443

149.28.99.97:443

207.246.77.75:443

149.28.98.196:995

207.246.116.237:2222

45.77.115.208:8443

Signatures

Files

  • 5646697885368320.zip
    .zip

    Password: infected

  • 39b946880e4f2b9a2ba7b81a53256d0bd191650b3827525033fc07ddf159ef50
    .dll windows x86 regsvr32


    Exports