Overview

overview

10

Static

static

10

1168-57-0x...ry.dll

windows7-x64

1

1168-57-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1168-57-0x0000000000450000-0x0000000000472000-memory.dmp

  • Size

    136KB

  • MD5

    526e66630bd584f1c710557199a92254

  • SHA1

    835b5daf37710c4d8a996aff6e6e14a82dfa3ba7

  • SHA256

    0df7136330a5bd33064f5c84e70da1f2ff2de61d82ae585de0381f0b77871c16

  • SHA512

    2bac5d98753b5c1ab31510f484e3ff506d6efcaccf12ad73c39c8f41274a7317696796ad1029ee9e3915363c8b733f52a9294d2ba073b5f49d2bdc2b656410b2

  • SSDEEP

    3072:K9ADPfOI/HlreyE3cgYDpLp1FZTBfZ2mG+:Kk+IPlrvV9DpF1FZTBx2m

Score
10/10
obama2061663660089qakbot

Malware Config

Extracted

Family

qakbot

Version

403.894

Botnet

obama206

Campaign

1663660089

C2

119.82.111.158:443

66.181.164.43:443

181.118.183.123:443

88.245.168.200:2222

70.49.33.200:2222

193.3.19.37:443

99.232.140.205:2222

110.4.255.247:443

134.35.9.144:443

89.211.217.38:995

64.207.215.69:443

83.110.219.59:993

197.94.84.128:443

177.255.14.99:995

41.103.226.172:443

109.155.5.164:993

190.44.40.48:995

187.205.222.100:443

41.107.78.223:995

191.97.234.238:995
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1168-57-0x0000000000450000-0x0000000000472000-memory.dmp
    .dll windows x86


    Headers

    Sections