General

  • Target

    qakbot_unpacked.bin.dll

  • Size

    259KB

  • MD5

    ce3f0976857fc0d156ba6dd0a556bd09

  • SHA1

    70897ccd7c47e47b0d6ec46a2cb1b1daeee1c779

  • SHA256

    ce9f6c057c5e35012fcc7ae1ec8781a32fcb15b189bd4dfeab4397d0e733ef7a

  • SHA512

    63ea220cabbcb5a2253a44514f52806afaa4a1011b1bad0f9d975d9cad51f7b64388c76f25450b91720de253e29ef5bc4c320ac8a92764ed79c6557a25a18907

  • SSDEEP

    1536:gB3xXA+TEcCGlVwKBqg+RHr2WL0wBA8tgJYOtKYJIOlnToIfpxZ0ad7abOItC6:gXQNofwK4PR6WgwA/J/tzjNTBfpnoym

Score
10/10

Malware Config

Extracted

Family

qakbot

Version

403.895

Botnet

BB

Campaign

1664184863

C2

197.204.227.155:443

123.23.64.230:443

173.218.180.91:443

111.125.157.230:443

70.49.33.200:2222

149.28.38.16:995

86.132.13.105:2078

149.28.38.16:443

45.77.159.252:995

45.77.159.252:443

149.28.63.197:995

144.202.15.58:443

45.63.10.144:443

45.63.10.144:995

149.28.63.197:443

144.202.15.58:995

39.121.226.109:443

177.255.14.99:995

134.35.10.30:443

99.232.140.205:2222

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • qakbot_unpacked.bin.dll
    .dll regsvr32 windows x86

    0ca0c58d9f3aa629bfca28a0bff008e3


    Headers

    Imports

    Exports

    Sections