Overview

overview

10

Static

static

10

1128-57-0x...ry.dll

windows7-x64

1

1128-57-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1128-57-0x00000000001D0000-0x00000000001F2000-memory.dmp

  • Size

    136KB

  • MD5

    ee51524edc5e4d3ba9b0ae9bd0c7764b

  • SHA1

    a523b3272ac3af0495151e8431b6a8c8579e6696

  • SHA256

    9d0a3ae5ce3137221a1024008c32cf2a55bd5dc2b02f29014643fa71e41a67f3

  • SHA512

    8fec75c151ca1ac937a28c3547d2c05ad5a11e89fc4c5d69ffa318b537782162ebfaff30694f8a7d966f05131fc31b5daca461adec075276732e37f5bf996ca3

  • SSDEEP

    3072:afryJRYSh3e3msZAmJZt1h8lTBfZdeuAAA:qyJBh3e3tymJn1alTBxUuA

Score
10/10
bb1662650043qakbot

Malware Config

Extracted

Family

qakbot

Version

403.860

Botnet

BB

Campaign

1662650043

C2

191.97.234.238:995

81.131.161.131:2078

197.94.210.133:443

193.3.19.37:443

70.51.153.182:2222

99.232.140.205:2222

123.240.131.1:443

177.102.84.28:32101

105.156.152.227:443

190.59.247.136:995

89.211.218.88:2222

81.214.220.237:443

85.99.62.74:443

217.165.68.122:993

219.69.103.199:443

37.210.148.30:995

64.207.215.69:443

113.169.57.104:443

179.225.221.169:32101

151.234.94.35:990
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1128-57-0x00000000001D0000-0x00000000001F2000-memory.dmp
    .dll windows x86


    Headers

    Sections