Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0e0290537cf212326aebc2f3537950f081392ce7a622c374e91d964aa385046c.bin

  • Size

    160KB

  • MD5

    16edb67f78b0be437d399767f900a6c0

  • SHA1

    1088f31918209e0dc56aa637ded24cce2a948fd4

  • SHA256

    0e0290537cf212326aebc2f3537950f081392ce7a622c374e91d964aa385046c

  • SHA512

    0aff9ab164543bdf20e371137e3513704c92d2acefe9b78bbfff2ce905ef70847638385c066a1bf82f69efc5092a17c68f25b516caabcf6144a8a76cb0c9d9e3

  • SSDEEP

    3072:p0MCiUUguKCs5HCBzPYAcJusT4ITBf5ArUQO/yaY/fT:4Ugbv5iBb9cJZT4ITBxArUz/g/

Score
10/10
obama2181666870886qakbot

Malware Config

Extracted

Family

qakbot

Version

404.2

Botnet

obama218

Campaign

1666870886

C2

24.206.27.39:443

1.102.156.146:8707

187.1.1.118:44751

172.117.139.142:995

1.181.118.183:31745

45.35.97.45:443

187.0.1.27:28294

58.247.115.126:995

1.24.9.220:42753

187.1.1.186:48208

112.141.184.246:995

201.223.169.238:32100

68.62.199.70:443

45.49.137.80:443

187.0.1.172:28709

102.159.236.29:443

183.242.1.187:1

186.48.161.130:995

191.33.187.192:2222

154.181.228.27:995
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 0e0290537cf212326aebc2f3537950f081392ce7a622c374e91d964aa385046c.bin
    .dll regsvr32 windows x86

    fedb443e18b9e0419f43a85a4e213660


    Headers

    Imports

    Exports

    Sections