Overview

overview

10

Static

static

10

1224-57-0x...ry.dll

windows7-x64

1

1224-57-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1224-57-0x00000000001A0000-0x00000000001C2000-memory.dmp

  • Size

    136KB

  • MD5

    6fd37e471ba15e5a5992da549f49b909

  • SHA1

    9decc842fc62781ec11e2f95272f487c0754ec4a

  • SHA256

    11e353631290081618dc38c77f3e2ebeeddd55081695d0c4e1618641d309c0b1

  • SHA512

    99c0046315c2af782d464ebfd44c7f47e091d6235e145a0690be7f4035bdad872751b377ecbea7a78e1b3a040c9bae0f1ec7e1f925312ff93a7f7d2acc65a024

  • SSDEEP

    3072:e0aZ3cYTevjIX+46V5zYHpYO3o1TBfVHOXZ+:e0JrvjIXxgcHpN3o1TBtHOX

Score
10/10
obama2061663660089qakbot

Malware Config

Extracted

Family

qakbot

Version

403.894

Botnet

obama206

Campaign

1663660089

C2

119.82.111.158:443

66.181.164.43:443

181.118.183.123:443

88.245.168.200:2222

70.49.33.200:2222

193.3.19.37:443

99.232.140.205:2222

110.4.255.247:443

134.35.9.144:443

89.211.217.38:995

64.207.215.69:443

83.110.219.59:993

197.94.84.128:443

177.255.14.99:995

41.103.226.172:443

109.155.5.164:993

190.44.40.48:995

187.205.222.100:443

41.107.78.223:995

191.97.234.238:995
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1224-57-0x00000000001A0000-0x00000000001C2000-memory.dmp
    .dll windows x86


    Headers

    Sections