Overview

overview

10

Static

static

10

1988-58-0x...ry.dll

windows7-x64

3

1988-58-0x...ry.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1988-58-0x00000000001B0000-0x00000000001DA000-memory.dmp

  • Size

    168KB

  • MD5

    c599e6d1590d3ee4f3bb6b08716de349

  • SHA1

    2694f2056cf71c74c9a019f82bc6b70e24ad42bf

  • SHA256

    0a2d1fb7f98cd2c71e88aae4b6435254b8133d10cfb9eb5d440747d0cc3a052d

  • SHA512

    a2cd10ab39faa7ef44658a5a3f06db4f358f145a84ec6e4b64b6d87cd670f0cfe7fa9fdda102cb9422d81d72407dce5ec6b0446d7046baca40793dcfb696c0ac

  • SSDEEP

    3072:rx8F5NzYtNi478azAFJcEtdfTBfFCgyyO/yaz:K0a478a0FJvtdfTB9CNN/b

Score
10/10
bb051667294768qakbot

Malware Config

Extracted

Family

qakbot

Version

404.20

Botnet

BB05

Campaign

1667294768

C2

136.232.184.134:995

1.65.20.175:53249

187.0.1.154:63263

50.68.204.71:995

74.92.243.113:50000

1.149.126.159:57345

187.0.1.182:17093

123.3.240.16:995

76.68.34.167:2222

172.219.147.156:3389

94.49.5.116:443

187.0.1.181:14507

206.1.223.234:2087

187.0.1.186:18828

131.23.1.187:1

23.233.254.195:443

76.125.91.160:443

187.0.1.90:42349

70.51.139.148:2222

187.0.1.76:47526
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1988-58-0x00000000001B0000-0x00000000001DA000-memory.dmp
    .dll windows x86


    Headers

    Sections