General

  • Target

    15991f87b8ee4de1163d226fb4825c91a600b0aa5c7359021cb5ef5339eaecda_unpacked

  • Size

    230KB

  • MD5

    25984af48fa27ec36bd257f8478aa628

  • SHA1

    a786fa7c5b9c71fff963581c1792f8a044262929

  • SHA256

    9bb396b30891b28be08339c37ce6c249989f0e1c90a8755dc445c8417e6d0f27

  • SHA512

    9de996ebbb2259c5b622d1bc00a6cb0f46766581e1fa3f18769b799daa7c76714b68c287ae995080355ba334ad9419c8facc57c9cdb5c2904e40bb62693d22d1

  • SSDEEP

    6144:Ol64hYSMsu2yl4hL2TBwjXaqJDf2sIM4:g64S0uSh2T6jXaSDVIN

Malware Config

Extracted

Family

qakbot

Version

402.68

Botnet

obama53

Campaign

1622633996

C2

96.61.23.88:995

86.220.62.251:2222

71.74.12.34:443

75.67.192.125:443

24.152.219.253:995

105.198.236.101:443

24.179.77.236:443

47.22.148.6:443

92.59.35.196:2222

81.97.154.100:443

207.246.116.237:443

207.246.77.75:995

45.32.211.207:2222

45.77.115.208:443

149.28.98.196:443

45.77.115.208:2222

144.202.38.185:995

45.77.115.208:8443

207.246.77.75:8443

207.246.77.75:443

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Signatures

Files

  • 15991f87b8ee4de1163d226fb4825c91a600b0aa5c7359021cb5ef5339eaecda_unpacked
    .dll regsvr32 windows x86

    4885f446711c862940639779fa789264


    Headers

    Imports

    Exports

    Sections