Overview

overview

10

Static

static

10

2d79971a0f...ed.dll

windows7-x64

10

2d79971a0f...ed.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2d79971a0f59631271cd1605f8eb39ecdf57e39fbfff88494df0c69ec6fd0d34_unpacked

  • Size

    156KB

  • MD5

    e5eb07b009ca666f91ef5fe48269ca52

  • SHA1

    3ad892dec81655309785e185754319f38ebbf437

  • SHA256

    78fc57ab2b1c1e68714e98168bf15521d08081219f19f7b539109f9b2fa35fbf

  • SHA512

    1ae92e9632d6798f643cb400b6ebb34148d0bb978a9a01175046138554d50ed0eb2fbdb3a4c75b308625d0c3f130570f2d8768425589983baecccc9391bc2949

  • SSDEEP

    3072:659rTfxRO0ffjPANJo+Hh4TBf9b/6oVO/ya:Q9rTps0fb4NJFHh4TBVb/vE/

Score
10/10
obama2121665497532qakbot

Malware Config

Extracted

Family

qakbot

Version

403.973

Botnet

obama212

Campaign

1665497532

C2

190.11.198.76:443

41.111.85.167:443

134.35.2.138:443

105.108.80.229:443

179.113.97.4:32101

197.158.89.85:443

197.204.101.178:443

105.69.147.88:995

41.103.252.215:443

41.104.109.190:443

41.107.209.163:443

14.227.159.241:443

82.12.196.197:443

103.156.237.139:443

196.235.137.166:443

181.141.3.126:443

102.157.22.8:443

41.111.52.120:443

197.92.143.218:443

181.44.34.172:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 2d79971a0f59631271cd1605f8eb39ecdf57e39fbfff88494df0c69ec6fd0d34_unpacked
    .dll regsvr32 windows x86

    f4d80980e1c9c4a4bf5b5b9b08dff505


    Headers

    Imports

    Exports

    Sections