Overview

overview

10

Static

static

10

unpacked_new_qbot.dll

windows7-x64

10

unpacked_new_qbot.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    unpacked_new_qbot.bin

  • Size

    126KB

  • MD5

    377acb7149fdfa56c090d9a12619a53c

  • SHA1

    9a99438b39514c6e87e38a0045faa2b06c2b2a3c

  • SHA256

    7ccabca68a4830878f1598056475e8bc62a81bf7a794300af3fed248c2d72ada

  • SHA512

    4a1bf2c2f508e00297305bcfda518104760f0e7c064657dcb2e85e7ea69cf1d3b0d6ea4499e20b78fd9740ffa328ad8f49f359d05fff21e785cf0c99ae7eb27f

  • SSDEEP

    1536:D+p51x5SaZcwCZyMKSVguRgAx8BAvbXgJlOwKYhIOpnToIfpxSegrzEQK:D+2nKIzRge0AvcJUwzLBTBfpMeZQK

Score
10/10
bb1662647912qakbot

Malware Config

Extracted

Family

qakbot

Version

403.860

Botnet

BB

Campaign

1662647912

C2

197.94.210.133:443

193.3.19.37:443

70.51.153.182:2222

99.232.140.205:2222

123.240.131.1:443

177.102.84.28:32101

105.156.152.227:443

190.59.247.136:995

89.211.218.88:2222

81.214.220.237:443

85.99.62.74:443

191.97.234.238:995

81.131.161.131:2078

217.165.68.122:993

219.69.103.199:443

37.210.148.30:995

64.207.215.69:443

113.169.57.104:443

179.225.221.169:32101

151.234.99.49:990
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • unpacked_new_qbot.bin
    .dll regsvr32 windows x86

    1f35d30e547df2c60999fd68d11b5f2c


    Headers

    Imports

    Exports

    Sections