General

  • Target

    cd2fc.bin

  • Size

    168KB

  • MD5

    63a2327d304228ee2d16da209c636e23

  • SHA1

    1729e405128397e7d5b47d8cd2070813a50eb504

  • SHA256

    cd2fc9bcc1cf850bf1fb9494eba05ba6cd468c356321a3dbf781e898164e0b91

  • SHA512

    006acc46fa18e0354f8decf04131d3ed685b6624765340c6953d183085677627627f24c27de925bbb8c0def64849b85b3d4a5ee337047d8d85600810e9a13cc7

  • SSDEEP

    3072:5x4OeH/tfVNYdFefabGEBAJJKKFcFzTBfpwgOKO/yaz:ne5XYufabGEqJJbFMzTBhwxl/b

Score
10/10

Malware Config

Extracted

Family

qakbot

Version

404.20

Botnet

BB05

Campaign

1667294768

C2

136.232.184.134:995

1.65.20.175:53249

187.0.1.154:63263

50.68.204.71:995

74.92.243.113:50000

1.149.126.159:57345

187.0.1.182:17093

123.3.240.16:995

76.68.34.167:2222

172.219.147.156:3389

94.49.5.116:443

187.0.1.181:14507

206.1.223.234:2087

187.0.1.186:18828

131.23.1.187:1

23.233.254.195:443

76.125.91.160:443

187.0.1.90:42349

70.51.139.148:2222

187.0.1.76:47526

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • cd2fc.bin
    .dll regsvr32 windows x86

    243b9f9082a56e7680f2feb8bfe22095


    Headers

    Imports

    Exports

    Sections