General

  • Target

    3d098041e21e9c8dee4d7a20257a43eda6beebed905523cf38c7215ef195811e.bin

  • Size

    170KB

  • MD5

    ab53b75859e2acce1b0f19a4d8672ced

  • SHA1

    a440e34838545c677a1d9a79cfcac66199048f4a

  • SHA256

    3d098041e21e9c8dee4d7a20257a43eda6beebed905523cf38c7215ef195811e

  • SHA512

    b6c881c9571cd037222184f1739cc8c102755f3900a893f9fb65e82319db64b2411e9a540b03e07566ee1942ad894091beff6b961fe79d88df35d1c0bdde4f4b

  • SSDEEP

    3072:J0MCiUUguKCs5HCBzPYAcJusT4ITBf5ArUEO/ya+fT:YUgbv5iBb9cJZT4ITBxArUv/G

Score
10/10

Malware Config

Extracted

Family

qakbot

Version

404.2

Botnet

BB04

Campaign

1666863946

C2

27.110.134.202:995

1.156.220.47:17155

186.188.80.134:443

1.190.199.101:9480

187.1.1.181:42178

118.200.83.226:443

187.0.1.144:51727

193.3.19.137:443

1.201.68.209:12157

188.49.56.189:443

187.0.1.14:58271

190.74.248.136:443

201.210.92.3:2222

187.0.1.105:40325

64.123.103.123:443

41.97.169.44:443

72.88.245.71:443

187.0.1.45:59049

41.100.163.127:443

187.0.1.83:62527

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 3d098041e21e9c8dee4d7a20257a43eda6beebed905523cf38c7215ef195811e.bin
    .dll regsvr32 windows x86

    fedb443e18b9e0419f43a85a4e213660


    Headers

    Imports

    Exports

    Sections