Overview

overview

10

Static

static

10

1372-98-0x...ry.dll

windows7-x64

3

1372-98-0x...ry.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1372-98-0x0000000000200000-0x000000000022A000-memory.dmp

  • Size

    168KB

  • Sample

    221101-1nrdtsgbcj

  • MD5

    641ae25c938f5ebeb653ad21a664fc51

  • SHA1

    ba15817ae0b697aa15dfd243b6f800565aa67dd9

  • SHA256

    6ceebc58326f47940cb08befd0d975503fa142a7a8b2139687d8c53cf9142fec

  • SHA512

    647fead6cf9248ecabd64b2e99d4f4b9d7ee80ea891b17f7369baefae8318d41195715482e51739d86e6a4db815b059aa92c436ed23f99fa5cae4ec1c1b81b78

  • SSDEEP

    3072:pxE0PN9mW31NzUjHBxMAXJ3bTS/TBfZfgKtO/yaz:x621+jHBxJXJLTS/TBxfN8/b

Score
10/10
qakbotbb051667294768

Malware Config

Extracted

Family

qakbot

Version

404.20

Botnet

BB05

Campaign

1667294768

C2

136.232.184.134:995

1.65.20.175:53249

187.0.1.154:63263

50.68.204.71:995

74.92.243.113:50000

1.149.126.159:57345

187.0.1.182:17093

123.3.240.16:995

76.68.34.167:2222

172.219.147.156:3389

94.49.5.116:443

187.0.1.181:14507

206.1.223.234:2087

187.0.1.186:18828

131.23.1.187:1

23.233.254.195:443

76.125.91.160:443

187.0.1.90:42349

70.51.139.148:2222

187.0.1.76:47526
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      1372-98-0x0000000000200000-0x000000000022A000-memory.dmp

    • Size

      168KB

    • MD5

      641ae25c938f5ebeb653ad21a664fc51

    • SHA1

      ba15817ae0b697aa15dfd243b6f800565aa67dd9

    • SHA256

      6ceebc58326f47940cb08befd0d975503fa142a7a8b2139687d8c53cf9142fec

    • SHA512

      647fead6cf9248ecabd64b2e99d4f4b9d7ee80ea891b17f7369baefae8318d41195715482e51739d86e6a4db815b059aa92c436ed23f99fa5cae4ec1c1b81b78

    • SSDEEP

      3072:pxE0PN9mW31NzUjHBxMAXJ3bTS/TBfZfgKtO/yaz:x621+jHBxJXJLTS/TBxfN8/b

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks