Overview

overview

10

Static

static

10

1712-57-0x...ry.dll

windows7-x64

1

1712-57-0x...ry.dll

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1712-57-0x0000000000170000-0x0000000000192000-memory.dmp

  • Size

    136KB

  • Sample

    220716-leax6abfdl

  • MD5

    267153a50e94684a50319fe5e5658fd0

  • SHA1

    d3e95a1129c2dc5cba9f62f64186ec3eb3046d7d

  • SHA256

    d5462848a3c5328388289dd7ff938750a32ad78c99e21999fbe709e06e7fa213

  • SHA512

    ae0b54d2868afc1e6bfe7f753363eb8e83fb22a6c10d08765914b0dcb47a203e9889854e8c1f206fa0001f97aba06b4b31a800a663a9693ba5100b533ca51fd5

Score
10/10
qakbotobama1931656010579

Malware Config

Extracted

Family

qakbot

Version

403.780

Botnet

obama193

Campaign

1656010579

C2

104.34.212.7:32103

86.200.151.188:2222

41.228.22.180:443

94.59.15.180:2222

45.46.53.140:2222

189.78.107.163:32101

24.178.196.158:2222

179.158.105.44:443

37.34.253.233:443

47.23.89.60:993

176.45.232.204:995

120.150.218.241:995

38.70.253.226:2222

40.134.246.185:995

5.32.41.45:443

72.252.157.93:990

72.252.157.93:993

24.55.67.176:443

93.48.80.198:995

100.38.242.113:995
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Targets

    • Target

      1712-57-0x0000000000170000-0x0000000000192000-memory.dmp

    • Size

      136KB

    • MD5

      267153a50e94684a50319fe5e5658fd0

    • SHA1

      d3e95a1129c2dc5cba9f62f64186ec3eb3046d7d

    • SHA256

      d5462848a3c5328388289dd7ff938750a32ad78c99e21999fbe709e06e7fa213

    • SHA512

      ae0b54d2868afc1e6bfe7f753363eb8e83fb22a6c10d08765914b0dcb47a203e9889854e8c1f206fa0001f97aba06b4b31a800a663a9693ba5100b533ca51fd5

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks