Overview

overview

10

Static

static

10

1500-58-0x...ry.dll

windows7-x64

1

1500-58-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1500-58-0x0000000000A50000-0x0000000000A72000-memory.dmp

  • Size

    136KB

  • MD5

    4f2dd55e61f9d46734ba1442090baedb

  • SHA1

    a2690c1aa87769a2582947ad3c6a566983ab8071

  • SHA256

    b29e2c469f70a103817d3f8478c6aad29a3e9d633eeb218c99d68b158952e635

  • SHA512

    1e2f690743707b37e0d91bde8081db59c67a6dfdabe7259e0655e8e98c98831fc62d22832faebc1d00af0985325e251a5f6beebedd9a4efef113f76cab207dca

  • SSDEEP

    3072:rysTDU+CO+nm18MRAGJhV1LsFTBfZlehr4K:3wpO+nmdaGJn1gFTBxchr

Score
10/10
bb1662647912qakbot

Malware Config

Extracted

Family

qakbot

Version

403.860

Botnet

BB

Campaign

1662647912

C2

197.94.210.133:443

193.3.19.37:443

70.51.153.182:2222

99.232.140.205:2222

123.240.131.1:443

177.102.84.28:32101

105.156.152.227:443

190.59.247.136:995

89.211.218.88:2222

81.214.220.237:443

85.99.62.74:443

191.97.234.238:995

81.131.161.131:2078

217.165.68.122:993

219.69.103.199:443

37.210.148.30:995

64.207.215.69:443

113.169.57.104:443

179.225.221.169:32101

151.234.99.49:990
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1500-58-0x0000000000A50000-0x0000000000A72000-memory.dmp
    .dll windows x86


    Headers

    Sections