Overview

overview

10

Static

static

10

80000.dll

windows7-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    80000.dll

  • Size

    156KB

  • MD5

    136bf2fb221adb56a4cd851993fa88e2

  • SHA1

    8533ee74f1a6960fe2d4980b48a17e43008779c3

  • SHA256

    8867d320097190185bcaee6d008443c1a1a7b3e66515dcbbd7a3f97c9847cee2

  • SHA512

    67a6fe0f8ea57a18c1efce8876e7115d1e73af59ba4e397d2fd9b385ebb6791d7df8eff8b723566532192b57cfdb2dc0b08f04fb0c7236d1f8abfe1ff9ffed51

  • SSDEEP

    3072:fP0ZJgbHDItQO3ABJNJfl0tgvTBfdKynaO/ya:H0Z6bDIpwBJnfl0tgvTBVVn1/

Score
10/10
obama2161666689942qakbot

Malware Config

Extracted

Family

qakbot

Version

403.1051

Botnet

obama216

Campaign

1666689942

C2

24.116.45.121:443

24.206.27.39:443

71.199.168.185:443

70.115.104.126:443

190.24.45.24:995

24.9.220.167:443

68.62.199.70:443

43.241.159.238:443

113.162.196.232:443

156.217.60.239:995

197.204.70.167:443

197.202.196.43:443

24.130.228.100:443

41.109.228.108:995

64.123.103.123:443

190.193.180.228:443

24.177.111.153:443

60.54.65.27:443

189.129.38.158:2222

206.1.164.250:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 80000.dll
    .dll regsvr32 windows x86

    4ec0fd278ac094f105aead49a4fff735


    Headers

    Imports

    Exports

    Sections