Overview

overview

10

Static

static

10

3c5fadfb93...ed.dll

windows7-x64

10

3c5fadfb93...ed.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3c5fadfb93b75d524499fd7978b0e7baca0fa3d577df9b6d8dd7228d91ee17cd_unpacked

  • Size

    126KB

  • MD5

    b857efb30d9e35bc83a294580ad8cc3a

  • SHA1

    6c850d5d6e47da76fe322573be0ae52a20631b7c

  • SHA256

    93808843b9afa92995e5cd3dadf019cf2d2c00573e1a6c648396ec6b3a738a93

  • SHA512

    ceaaad92c02316f45d641a2b4b5682bf1ca54872b64c24afbbc23d294139a55cb6598a7d1d6275bcc3bd0872328066c8538e0c9cf4a3b122898394dc81029c0f

  • SSDEEP

    3072:WSIPQLrXGz6+cC9WU5CACPJHjLg3oTBfJVYq7:W0XGO+J9RHCPJDLcoTBhaq7

Score
10/10
obama2111665387262qakbot

Malware Config

Extracted

Family

qakbot

Version

403.914

Botnet

obama211

Campaign

1665387262

C2

197.92.143.218:443

134.35.4.128:443

41.97.127.116:443

42.189.2.151:80

105.99.214.100:443

163.182.177.80:443

197.204.78.120:443

186.18.77.99:443

190.73.190.235:443

197.11.134.255:443

86.196.181.62:2222

94.52.127.44:443

181.141.3.126:443

41.96.120.232:443

190.100.149.122:995

197.1.78.64:443

105.108.189.56:443

102.157.9.107:443

186.86.212.138:443

41.107.236.152:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 3c5fadfb93b75d524499fd7978b0e7baca0fa3d577df9b6d8dd7228d91ee17cd_unpacked
    .dll regsvr32 windows x86

    0ca0c58d9f3aa629bfca28a0bff008e3


    Headers

    Imports

    Exports

    Sections