Overview

overview

10

Static

static

10

1080-99-0x...ry.dll

windows7-x64

1

1080-99-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1080-99-0x0000000001EA0000-0x0000000001EC9000-memory.dmp

  • Size

    164KB

  • MD5

    1861c566e2ccb6f1eb748f34da47ecb6

  • SHA1

    1d0bb50b20748d13b80e9536d93b6b7483a9d378

  • SHA256

    1b64bbad7b0ebca04900f3bbcd627d14cf8e46cbc147af6bb8d9aa021d1441e6

  • SHA512

    281e1965901fb2789cc042ec021269236c2ec651da77632f8cb40d1604f13e508e0683d0d37d630b72f6bc01112d7e5f16f326cacc512dbc2aa38528c494f618

  • SSDEEP

    3072:K09u9KGxHUdb8H6abAtJxM9aHTBflnyHAO/ya:o9Ki0db8BMtJe9aHTB9yHj/

Score
10/10
obama2161666689942qakbot

Malware Config

Extracted

Family

qakbot

Version

403.1051

Botnet

obama216

Campaign

1666689942

C2

24.116.45.121:443

24.206.27.39:443

71.199.168.185:443

70.115.104.126:443

190.24.45.24:995

24.9.220.167:443

68.62.199.70:443

43.241.159.238:443

113.162.196.232:443

156.217.60.239:995

197.204.70.167:443

197.202.196.43:443

24.130.228.100:443

41.109.228.108:995

64.123.103.123:443

190.193.180.228:443

24.177.111.153:443

60.54.65.27:443

189.129.38.158:2222

206.1.164.250:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1080-99-0x0000000001EA0000-0x0000000001EC9000-memory.dmp
    .dll windows x86


    Headers

    Sections