Overview

overview

10

Static

static

10

1916-57-0x...ry.dll

windows7-x64

1

1916-57-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1916-57-0x00000000007D0000-0x00000000007F2000-memory.dmp

  • Size

    136KB

  • MD5

    3e3594b84b61e8efa1663ef22e6233a4

  • SHA1

    875abe53ce26d93de12263488b8b706ebe8e1f4f

  • SHA256

    76a9768dd0672782e37489fd83569c8607dc706da99886679367b38820a2bf1c

  • SHA512

    9c09d93ff641c095c55d9ae4add1ac9466f35f7eeb2c6176d7858767786a61812ef8bc4aeda8ca9ff411679d85d7ffe8737c9dfd8b7b2cfd7c703bdc36af7c43

  • SSDEEP

    1536:mpUbsRa3mqrICJCOghbSn1NgJ+uc97OyBAgcTJ0n0FH9IOcnToIfZsH0ad7C1:m67Wo2/bSzQ+uy6qAfJi013wTBfZqQ

Score
10/10
bb1663241231qakbot

Malware Config

Extracted

Family

qakbot

Version

403.892

Botnet

BB

Campaign

1663241231

C2

81.131.161.131:2078

217.165.85.223:993

37.210.148.30:995

200.161.62.126:32101

78.100.225.34:2222

119.82.111.158:443

66.181.164.43:443

134.35.13.45:443

193.3.19.37:443

99.232.140.205:2222

197.94.210.133:443

87.243.113.104:995

84.38.133.191:443

14.184.97.67:443

123.240.131.1:443

194.166.207.160:995

78.168.87.170:2222

180.180.131.95:443

41.99.21.248:443

190.44.40.48:995
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1916-57-0x00000000007D0000-0x00000000007F2000-memory.dmp
    .dll windows x86


    Headers

    Sections