Overview

overview

10

Static

static

10

daa3557a9a...1).dll

windows7-x64

10

daa3557a9a...1).dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    daa3557a9a632d9f897a8d7c1ef0e40a5715f0badc424f57f5ea50525fdd7122(1).bin

  • Size

    157KB

  • MD5

    66a0741f8f43b584e387459b367097c1

  • SHA1

    3794e128ba8d8b29404d036423493a722d521b6b

  • SHA256

    daa3557a9a632d9f897a8d7c1ef0e40a5715f0badc424f57f5ea50525fdd7122

  • SHA512

    bbf38e0c514c164959a0c725142724d5c01073471ef4b6b413b13e9184dae3300a2ea11add9d8c63198c6e481be792bf9a01f53c7977b7e36ad6bb326cf73e3b

  • SSDEEP

    3072:2/ape0ZdmBNT0xfxcAA+JZZzlsTBfZkgoEO/yavX1:Df6exfxc1+JTzlsTBRkHv/

Score
10/10
bb051667208557qakbot

Malware Config

Extracted

Family

qakbot

Version

404.14

Botnet

BB05

Campaign

1667208557

C2

174.77.209.5:443

187.0.1.74:23795

24.206.27.39:443

1.156.220.169:30723

156.216.39.119:995

58.186.75.42:443

1.156.197.160:30467

187.1.1.190:4844

186.18.210.16:443

1.181.56.171:771

90.165.109.4:2222

187.0.1.186:39742

87.57.13.215:443

187.0.1.207:52344

227.26.3.227:1

98.207.190.55:443

187.0.1.197:7017

188.49.56.189:443

102.156.160.115:443

187.0.1.24:17751
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • daa3557a9a632d9f897a8d7c1ef0e40a5715f0badc424f57f5ea50525fdd7122(1).bin
    .dll regsvr32 windows x86

    243b9f9082a56e7680f2feb8bfe22095


    Headers

    Imports

    Exports

    Sections