Overview

overview

10

Static

static

10

1116-58-0x...ry.dll

windows7-x64

3

1116-58-0x...ry.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1116-58-0x00000000001B0000-0x00000000001DA000-memory.dmp

  • Size

    168KB

  • MD5

    10080573a7679bb09d73a7aefed87184

  • SHA1

    bdd236bf9143c63db876148fe04198d21550252a

  • SHA256

    5552af9c3a73a75943fd8aee0bd19b96df7777efd791c33866176aa88f3379a7

  • SHA512

    519b21ead40914a8e73e4443549ce36ac3c2923f3edd593e485638d67d453d594819ccd322531bd21f0bb40660dd46ca9c412b9447f2612366bbe0ddaa9c1a6d

  • SSDEEP

    3072:rx8F5NzYtNi478azAFJcEtlfTBfFCgygO/yaz:K0a478a0FJvtlfTB9CND/b

Score
10/10
bb051667294768qakbot

Malware Config

Extracted

Family

qakbot

Version

404.20

Botnet

BB05

Campaign

1667294768

C2

136.232.184.134:995

1.65.20.175:53249

187.0.1.154:63263

50.68.204.71:995

74.92.243.113:50000

1.149.126.159:57345

187.0.1.182:17093

123.3.240.16:995

76.68.34.167:2222

172.219.147.156:3389

94.49.5.116:443

187.0.1.181:14507

206.1.223.234:2087

187.0.1.186:18828

131.23.1.187:1

23.233.254.195:443

76.125.91.160:443

187.0.1.90:42349

70.51.139.148:2222

187.0.1.76:47526
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1116-58-0x00000000001B0000-0x00000000001DA000-memory.dmp
    .dll windows x86


    Headers

    Sections