General

  • Target

    5f77cbb8c78ee493ace6bd7d89882300a7e3f198f6401698cd4aab409e92a39d.dll

  • Size

    136KB

  • MD5

    48f774a8d9a83a3e5b69a4b9509029e4

  • SHA1

    8ad96089867a2b736a7863dbf796d290debd3614

  • SHA256

    5f77cbb8c78ee493ace6bd7d89882300a7e3f198f6401698cd4aab409e92a39d

  • SHA512

    19ac40ad08bf2027be64d90270db72a7c87d128aafac3f09965f29b486eb5c4c8b487bc0a6b2f29a30c5087e0f8f0e19c950e22268273f269ac1cf061d94242a

  • SSDEEP

    3072:zKiWpv5+djKmTxXftoAOvJ11Hv8TBf9vY6B:zaEOmTxX1tOvJvHv8TBVQ6B

Score
10/10

Malware Config

Extracted

Family

qakbot

C2

78.94.148.92:1753

134.180.185.240:32987

201.136.101.182:38323

124.77.95.5:46163

196.90.29.190:30693

187.144.110.117:36330

10.44.33.140:65267

162.117.200.91:29984

159.254.223.192:31154

11.239.81.233:37

31.248.76.23:24072

224.77.182.18:55579

124.230.27.11:44408

205.255.39.94:54675

192.1.213.104:14212

145.3.120.239:20068

242.199.30.106:9157

243.240.195.106:42825

74.234.32.185:42698

102.51.5.67:47820

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 5f77cbb8c78ee493ace6bd7d89882300a7e3f198f6401698cd4aab409e92a39d.dll
    .dll regsvr32 windows x86

    0ca0c58d9f3aa629bfca28a0bff008e3


    Headers

    Imports

    Exports

    Sections