Overview

overview

10

Static

static

10

1144-134-0...ry.dll

windows7-x64

1

1144-134-0...ry.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    1144-134-0x0000000001060000-0x0000000001082000-memory.dmp

  • Size

    136KB

  • MD5

    90490dd29e455546bfeb9d4999a6a881

  • SHA1

    b0f3b5c73acd90306878b6ce1f9482554734fa63

  • SHA256

    fde79693fe36cf5624905b1e38788d3cfa9cf913fc36fb6d3a4e15ecef684265

  • SHA512

    5c50f05aa211fe62883f959224ad2347ff09d5729a7789dd00c626de9c114f8b931dc01f75178eb3f0bda99fee94d8648d4d8adbfe537f3b451eb34a4a640c72

  • SSDEEP

    1536:HNsYodbUCCs6RCB+6gI6g4qft92RBACCVJ4FK1JVUIOxnToIftKR0ad7SJO:H/oSYaCB+NjgbtcLAlJoKl6ZTBft+Qw

Score
10/10
bb1664292152qakbot

Malware Config

Extracted

Family

qakbot

Version

403.895

Botnet

BB

Campaign

1664292152

C2

212.102.56.47:443

189.189.89.32:443

85.245.143.94:443

110.238.39.214:443

185.233.79.238:995

85.94.178.73:995

193.3.19.137:443

193.254.32.156:443

154.237.49.4:995

41.104.77.244:443

181.206.46.7:443

186.16.163.94:443

75.71.96.226:995

179.111.23.186:32101

41.97.65.83:443

41.105.89.30:443

85.86.242.245:443

181.105.32.5:443

197.41.235.69:995

103.173.121.17:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1144-134-0x0000000001060000-0x0000000001082000-memory.dmp
    .dll windows x86


    Headers

    Sections