Overview

overview

10

Static

static

10

912-57-0x0...ry.dll

windows7-x64

1

912-57-0x0...ry.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    912-57-0x0000000000300000-0x0000000000329000-memory.dmp

  • Size

    164KB

  • MD5

    228c6bb7b4eaa26f743227aa124e97ca

  • SHA1

    2e5c8cc821d6447b40104a37bf0edf6abee25931

  • SHA256

    67a5cfea41c6f44a30605852a2792a4113dead1de9b2fd2496ef0d13aaa1e363

  • SHA512

    b02e7e8820e80de66fdaa8a682e95bc2aec14884cd01342d1759c45472004a92c492bfa09e29aa1d2fda7d6b1fb1001b9a1489f621f96ce96ead60dbc2664af9

  • SSDEEP

    3072:zcLUd5RV86uoZPHZA5Jq8TiwTBfpp/6YgO/ya:Igd5rruoZvy5J5TiwTBBp/PD/

Score
10/10
obama2131665998932qakbot

Malware Config

Extracted

Family

qakbot

Version

403.973

Botnet

obama213

Campaign

1665998932

C2

70.173.248.13:443

219.71.108.177:443

206.1.189.186:443

14.246.151.175:443

102.159.77.134:995

200.233.108.153:993

134.35.3.85:443

190.199.186.117:2222

200.155.61.245:995

103.156.237.71:443

176.44.119.153:443

181.56.171.3:995

151.251.50.117:443

163.182.177.80:443

104.202.220.123:443

41.101.92.195:443

190.193.180.228:443

190.204.112.207:2222

41.97.56.102:443

41.69.209.76:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 912-57-0x0000000000300000-0x0000000000329000-memory.dmp
    .dll windows x86


    Headers

    Sections