General

  • Target

    ba420945a977a3cbf89a3ed950846967a4fe6d0783c1064ec2ce8cbb628f02d4.bin

  • Size

    167KB

  • MD5

    7cd55dce7799010b0f961f0eb5f57de7

  • SHA1

    4de8e2787034bafb389d463209efaab820b9da92

  • SHA256

    ba420945a977a3cbf89a3ed950846967a4fe6d0783c1064ec2ce8cbb628f02d4

  • SHA512

    3c8c36afb0e20742d54e613b91db8fbe9ae21bddc4483f8fea994f7fe9460f6e756d90be2549b85d65d8da659843ab32aefd8b19fb18c66cf74e05cba981fc02

  • SSDEEP

    3072:2/ape0ZdmBNT0xfxcAA+JZZzlsTBfZkgoEO/yavX14:Df6exfxc1+JTzlsTBRkHv/

Score
10/10

Malware Config

Extracted

Family

qakbot

Version

404.14

Botnet

BB05

Campaign

1667208557

C2

174.77.209.5:443

187.0.1.74:23795

24.206.27.39:443

1.156.220.169:30723

156.216.39.119:995

58.186.75.42:443

1.156.197.160:30467

187.1.1.190:4844

186.18.210.16:443

1.181.56.171:771

90.165.109.4:2222

187.0.1.186:39742

87.57.13.215:443

187.0.1.207:52344

227.26.3.227:1

98.207.190.55:443

187.0.1.197:7017

188.49.56.189:443

102.156.160.115:443

187.0.1.24:17751

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • ba420945a977a3cbf89a3ed950846967a4fe6d0783c1064ec2ce8cbb628f02d4.bin
    .dll regsvr32 windows x86

    243b9f9082a56e7680f2feb8bfe22095


    Headers

    Imports

    Exports

    Sections