Overview

overview

10

Static

static

10

ba2e03fe89...4d.dll

windows7-x64

3

ba2e03fe89...4d.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ba2e03fe89956b865d3c26827fda3f3cc4dc5c8c2d1d82a4577f221535ebeb4d.dll

  • Size

    126KB

  • MD5

    635c509a10fd873a42ee259fd68622ab

  • SHA1

    e199490483b3ec7aaa3ab82b229bf12dc0551893

  • SHA256

    ba2e03fe89956b865d3c26827fda3f3cc4dc5c8c2d1d82a4577f221535ebeb4d

  • SHA512

    9e42ec0db89e3eebbe93fcc3fca2b39bc293efde1f7bc2e18bb643b87e29461274fb1a3ce78be2b61edb6eff8d798f8411ffa7abb517ad4995d523ed5d3eae10

  • SSDEEP

    3072:iXwi3p+Ph6v7Y3l8HAhJsmt03RTBfNqYLC:9i3p+Pwv7YyghJ9tgRTBlqYO

Score
10/10
bb1663774884qakbot

Malware Config

Extracted

Family

qakbot

Version

403.895

Botnet

BB

Campaign

1663774884

C2

70.49.33.200:2222

181.118.183.123:443

99.232.140.205:2222

31.54.39.153:2078

173.218.180.91:443

193.3.19.37:443

134.35.8.88:443

41.97.152.42:443

70.51.132.197:2222

41.111.74.35:995

189.19.189.222:32101

105.156.139.150:443

217.165.68.59:993

119.82.111.158:443

111.125.157.230:443

125.25.129.70:443

197.94.84.128:443

177.255.14.99:995

187.205.222.100:443

190.44.40.48:995
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • ba2e03fe89956b865d3c26827fda3f3cc4dc5c8c2d1d82a4577f221535ebeb4d.dll
    .dll regsvr32 windows x86

    0ca0c58d9f3aa629bfca28a0bff008e3


    Headers

    Imports

    Exports

    Sections