Overview

overview

10

Static

static

10

43c7c8f02b...4b.dll

windows7-x64

3

43c7c8f02b...4b.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43c7c8f02be4221e412d480f7177a4667cc7ce92a59180404e6e4b45093c004b.dll

  • Size

    157KB

  • MD5

    d12783d7327a75110712223da96c3f30

  • SHA1

    b7554df0fce128471ca384172d9e7763f015c769

  • SHA256

    43c7c8f02be4221e412d480f7177a4667cc7ce92a59180404e6e4b45093c004b

  • SHA512

    89af15b927cbb5f1aa27580ff7b3762672bef45d6d6faad177fd45d2ff6b1b84da5f6fb8d992b6366888a41d150a7dfcc134f4f61a2fcffe725938df5c347379

  • SSDEEP

    3072:pVdZx1yoZPH5A5JKczWQTBfpJ/6Y8O/ya:zdZLyoZvS5JZzWQTBhJ/PH/

Score
10/10
obama2141666019778qakbot

Malware Config

Extracted

Family

qakbot

Version

403.973

Botnet

obama214

Campaign

1666019778

C2

105.96.221.136:443

37.37.80.2:3389

105.154.56.232:995

41.107.116.19:443

105.103.52.189:443

159.192.204.135:443

41.107.58.251:443

177.152.65.142:443

102.47.218.41:443

176.45.35.243:443

70.173.248.13:443

102.159.77.134:995

220.123.29.76:443

82.12.196.197:443

103.156.237.71:443

149.126.159.254:443

176.44.119.153:443

181.56.171.3:995

190.205.229.67:2222

151.251.50.117:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 43c7c8f02be4221e412d480f7177a4667cc7ce92a59180404e6e4b45093c004b.dll
    .dll regsvr32 windows x86

    f4d80980e1c9c4a4bf5b5b9b08dff505


    Headers

    Imports

    Exports

    Sections