Overview

overview

10

Static

static

10

2020-57-0x...ry.dll

windows7-x64

1

2020-57-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2020-57-0x0000000000AF0000-0x0000000000B12000-memory.dmp

  • Size

    136KB

  • MD5

    b3451d6fc64aa6b594d2d7201ac8cede

  • SHA1

    d3bf7774718e26325b79b6d30d09d42526c2ad06

  • SHA256

    24081fcd13cd2779ae0cc47642bb19e4300828952a97ddbdfa6b11ce2a5ce32e

  • SHA512

    d839c017e2e4fdf03fdfbd68c8b576b3d383f8707d61a299acb8a0745801c9e8cec7a58c0e0074a94fcb7dcb24f62cfbecfa96e762aaab684e1ef88d393ccafc

  • SSDEEP

    1536:WakwVnISCAQQxaMil2UIgmb1R8p1BAG69JIRWD5NdIOZnToIfN6d0ad7KowO:WXwSMvxaf7IH1Kp3ABJcWtxxTBfNa4O

Score
10/10
obama2071664363417qakbot

Malware Config

Extracted

Family

qakbot

Version

403.895

Botnet

obama207

Campaign

1664363417

C2

217.165.146.158:993

41.97.179.58:443

86.132.13.49:2078

197.203.50.195:443

85.245.143.94:443

86.196.181.62:2222

102.190.190.242:995

105.184.133.198:995

179.111.23.186:32101

179.251.119.206:995

84.3.85.30:443

39.44.5.104:995

197.41.235.69:995

193.3.19.137:443

186.81.122.168:443

103.173.121.17:443

41.104.80.233:443

102.189.184.12:995

156.199.90.139:443

14.168.180.223:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 2020-57-0x0000000000AF0000-0x0000000000B12000-memory.dmp
    .dll windows x86


    Headers

    Sections