Overview

overview

10

Static

static

10

1496-57-0x...ry.dll

windows7-x64

1

1496-57-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1496-57-0x0000000000320000-0x0000000000349000-memory.dmp

  • Size

    164KB

  • MD5

    14d32969ef1f1d801ce8bddfe85db349

  • SHA1

    a6fe9e80a3a42b06286a01c9eed471af6dadbe7b

  • SHA256

    378cac27d92f3dc5c974627f70ac6a87ed944083903517783b899182f2dfd693

  • SHA512

    2c7facb03878cb001b432637e89630c9a2b13abb1883a97fe27b22553a37230c477b4df993a2c140d291600ac430db08025b7ee64d96cb80f93e06ba6f535ef6

  • SSDEEP

    3072:S43G+VCYzZYfvcznbzAdJsi3cwTBfFX/64gO/ya:SSVjtoczb0dJd3cwTB9X/PD/

Score
10/10
obama2131665998932qakbot

Malware Config

Extracted

Family

qakbot

Version

403.973

Botnet

obama213

Campaign

1665998932

C2

70.173.248.13:443

219.71.108.177:443

206.1.189.186:443

14.246.151.175:443

102.159.77.134:995

200.233.108.153:993

134.35.3.85:443

190.199.186.117:2222

200.155.61.245:995

103.156.237.71:443

176.44.119.153:443

181.56.171.3:995

151.251.50.117:443

163.182.177.80:443

104.202.220.123:443

41.101.92.195:443

190.193.180.228:443

190.204.112.207:2222

41.97.56.102:443

41.69.209.76:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1496-57-0x0000000000320000-0x0000000000349000-memory.dmp
    .dll windows x86


    Headers

    Sections