Overview

overview

10

Static

static

10

1488-99-0x...ry.dll

windows7-x64

1

1488-99-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1488-99-0x0000000000E40000-0x0000000000E69000-memory.dmp

  • Size

    164KB

  • MD5

    27cf6a97bf8e1b4cd5b3b39146d284d1

  • SHA1

    c6df26e07ac685f2fc795a11788bdb43a9944a4d

  • SHA256

    75c807ee44595080a7aa58572d69cbbc9789590efa79e7b64da73673ecee7adf

  • SHA512

    5aa1ee491cb9224efe72720389f1ca0c0ef09320d7097a04d0656fc87908a8f7de823d395c1afbe29f1831d17cbd4c4fe91730b324a83a460bd72bc08d2013fe

  • SSDEEP

    3072:Lq8RokcHtFiWwA3JK7L+nTBf5Iy30O/ya:fR9cHtLF3JaL+nTBRX3f/

Score
10/10
bb041666265103qakbot

Malware Config

Extracted

Family

qakbot

Version

403.1051

Botnet

BB04

Campaign

1666265103

C2

102.156.82.38:995

152.170.17.136:443

216.131.22.236:995

70.173.248.13:443

14.246.151.175:443

160.179.32.101:995

118.175.242.26:995

186.188.80.202:443

41.69.181.145:443

156.220.14.160:993

201.68.209.47:32101

206.1.172.1:443

156.217.185.90:995

190.74.4.20:443

217.78.49.161:443

154.181.199.80:995

200.233.108.153:993

175.205.2.54:443

198.2.51.242:993

181.164.194.228:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1488-99-0x0000000000E40000-0x0000000000E69000-memory.dmp
    .dll windows x86


    Headers

    Sections