Overview

overview

10

Static

static

10

1312-99-0x...ry.dll

windows7-x64

3

1312-99-0x...ry.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    1312-99-0x00000000001F0000-0x0000000000219000-memory.dmp

  • Size

    164KB

  • MD5

    9de3f1ecaf1e480019660ddf170cf1d5

  • SHA1

    5084f409500d681020409f6f00a4727fe43640c5

  • SHA256

    9d892b93f9c82bbd944a384dec8f37c9a6c1478541257e96ecc35e94948f0264

  • SHA512

    0298829c173148e43ba8acdb3694523cd73d87fc821efba2ceb8e5282a74891a17013696126b75e9e7dfde83c3ec7867695984b56593f5ae281e2c9fd24d836c

  • SSDEEP

    3072:4FZJk0J9LcARXbGAfJxfteHATBfNc/6oWO/ya:YZJkkNcARLjfJFtcATBlc//Z/

Score
10/10
obama2141666019778qakbot

Malware Config

Extracted

Family

qakbot

Version

403.973

Botnet

obama214

Campaign

1666019778

C2

105.96.221.136:443

37.37.80.2:3389

105.154.56.232:995

41.107.116.19:443

105.103.52.189:443

159.192.204.135:443

41.107.58.251:443

177.152.65.142:443

102.47.218.41:443

176.45.35.243:443

70.173.248.13:443

102.159.77.134:995

220.123.29.76:443

82.12.196.197:443

103.156.237.71:443

149.126.159.254:443

176.44.119.153:443

181.56.171.3:995

190.205.229.67:2222

151.251.50.117:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1312-99-0x00000000001F0000-0x0000000000219000-memory.dmp
    .dll windows x86


    Headers

    Sections