Overview

overview

10

Static

static

10

81d5fd23e2...db.dll

windows7-x64

3

81d5fd23e2...db.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    81d5fd23e26eca131eaf4748c44a6485f84827f7448e9833b3c8b8fd975fe5db.dll

  • Size

    157KB

  • MD5

    73e166a5ad8b771cc3c8c135f84daa43

  • SHA1

    850f1adc526bb835ca01ecd29462636e6a5d50a0

  • SHA256

    81d5fd23e26eca131eaf4748c44a6485f84827f7448e9833b3c8b8fd975fe5db

  • SHA512

    4a65a216caa7ebecc6eb4d7327571ba3fef5a91e0f15c2a998625c80f78ace081be15f4c91426490ed51f592f53a3a9d2a6ecd2f9443f7cbec6f6bc5ca1a54e6

  • SSDEEP

    3072:GbLJEsAXBFa2MAnJuXT//TBf5cy3mO/ya:kFJAXBjJnJqT//TBxb3p/

Score
10/10
obama2171666765529qakbot

Malware Config

Extracted

Family

qakbot

Version

403.1051

Botnet

obama217

Campaign

1666765529

C2

197.204.53.242:443

105.106.60.149:443

102.159.110.79:995

64.207.237.118:443

156.216.134.70:995

180.151.116.67:443

190.199.97.108:993

206.1.203.0:443

186.188.96.197:443

206.1.128.203:443

201.249.100.208:995

190.75.151.66:2222

198.2.51.242:993

90.165.109.4:2222

71.199.168.185:443

181.56.171.3:995

43.241.159.148:443

41.103.1.16:443

24.207.97.117:443

105.157.86.118:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 81d5fd23e26eca131eaf4748c44a6485f84827f7448e9833b3c8b8fd975fe5db.dll
    .dll regsvr32 windows x86

    4ec0fd278ac094f105aead49a4fff735


    Headers

    Imports

    Exports

    Sections