Overview

overview

10

Static

static

10

1968-57-0x...ry.dll

windows7-x64

1

1968-57-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1968-57-0x0000000000710000-0x0000000000739000-memory.dmp

  • Size

    164KB

  • MD5

    4ae26e5aa62cd7caf5602916b87ba6fe

  • SHA1

    9f0dc58c8fc8950b19aae57f366bef1157168385

  • SHA256

    e37f6e9ffabc170f0ba24275d114b04c44c60c745118fe11dfeec08a76c7daf8

  • SHA512

    1efbc4579b88c8c06765172ca4dd24cc4ed74bc666b4748c7622b53d3e2b6aff1f030e15ffd6af715a2c06e9364846fab8340613e0fe955eadcd94c4a94fbff3

  • SSDEEP

    3072:H9NRe+lbwiRNRwAPJL9lGUwTBfZy/6YgO/ya:dNReGbwiNFPJhlLwTBxy//D/

Score
10/10
obama2131665998932qakbot

Malware Config

Extracted

Family

qakbot

Version

403.973

Botnet

obama213

Campaign

1665998932

C2

70.173.248.13:443

219.71.108.177:443

206.1.189.186:443

14.246.151.175:443

102.159.77.134:995

200.233.108.153:993

134.35.3.85:443

190.199.186.117:2222

200.155.61.245:995

103.156.237.71:443

176.44.119.153:443

181.56.171.3:995

151.251.50.117:443

163.182.177.80:443

104.202.220.123:443

41.101.92.195:443

190.193.180.228:443

190.204.112.207:2222

41.97.56.102:443

41.69.209.76:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1968-57-0x0000000000710000-0x0000000000739000-memory.dmp
    .dll windows x86


    Headers

    Sections