Overview

overview

10

Static

static

10

1816-58-0x...ry.dll

windows7_x64

3

1816-58-0x...ry.dll

windows10-2004_x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1816-58-0x00000000024A0000-0x000000000252F000-memory.dmp

  • Size

    572KB

  • Sample

    220408-r92l9adha3

  • MD5

    aebd3733adfc8890df5447d275cab924

  • SHA1

    2ff8459dd5f307ce6e44f0f51a690dc52e958b73

  • SHA256

    d5ab2c587b838441e914cd5216536a43140916f942cdd45b40e27d4995292b11

  • SHA512

    7b0e021a1d8a181bd547e2777c0d5d9698bdacec756ee0b66566717c1ad6ab1876c736a63846305405644ad7125b4d8e886a892a640ebadfe37b4832ed143b73

Score
10/10
qakbotaa1649273304

Malware Config

Extracted

Family

qakbot

Version

403.573

Botnet

AA

Campaign

1649273304

C2

83.110.75.97:2222

47.23.89.62:993

187.207.48.194:61202

45.63.1.12:995

140.82.63.183:995

45.76.167.26:995

140.82.63.183:443

144.202.2.175:995

144.202.3.39:443

149.28.238.199:443

144.202.3.39:995

45.63.1.12:443

149.28.238.199:995

45.76.167.26:443

144.202.2.175:443

100.1.108.246:443

32.221.224.140:995

24.55.67.176:443

31.35.28.29:443

70.51.134.168:2222
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      1816-58-0x00000000024A0000-0x000000000252F000-memory.dmp

    • Size

      572KB

    • MD5

      aebd3733adfc8890df5447d275cab924

    • SHA1

      2ff8459dd5f307ce6e44f0f51a690dc52e958b73

    • SHA256

      d5ab2c587b838441e914cd5216536a43140916f942cdd45b40e27d4995292b11

    • SHA512

      7b0e021a1d8a181bd547e2777c0d5d9698bdacec756ee0b66566717c1ad6ab1876c736a63846305405644ad7125b4d8e886a892a640ebadfe37b4832ed143b73

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks