Overview

overview

10

Static

static

10

1432-58-0x...ry.dll

windows7-x64

3

1432-58-0x...ry.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1432-58-0x0000000000260000-0x000000000028A000-memory.dmp

  • Size

    168KB

  • MD5

    cdee7d5cfc8b80c3aa6b4d0efdc4dc6b

  • SHA1

    55199d1274a82a9d0a0457d20389a7596fe59eec

  • SHA256

    219c42326b075b052cc38e6162965b99d99aa5ff2f638600d5f4ab5fed40f988

  • SHA512

    7c5cba64c07d8928fb62bcfff938638d63054cd1e8db4bf85d3a76f370cf2f3a99230fc39a60825561176374e23f5805045347bb8186f52f8379f40efe69af47

  • SSDEEP

    3072:w4hEIu3Q+AtJFcoxK3zCA8Jq03VGcTBfttva83zOO/ya:hSQx7GsK3zH8Jh3VGcTBlE83zx/

Score
10/10
bb061668683197qakbot

Malware Config

Extracted

Family

qakbot

Version

404.30

Botnet

BB06

Campaign

1668683197

C2

23.240.47.58:995

12.172.173.82:465

91.169.12.198:32100

94.63.65.146:443

80.13.179.151:2222

64.207.237.118:443

24.206.27.39:443

83.114.60.6:2222

86.171.75.63:443

86.195.32.149:2222

170.253.25.35:443

92.185.204.18:2078

157.231.42.190:995

170.249.59.153:443

174.101.111.4:443

116.74.163.152:443

76.80.180.154:995

180.151.104.143:443

86.130.9.167:2222

86.99.15.243:2222
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1432-58-0x0000000000260000-0x000000000028A000-memory.dmp
    .dll windows x86


    Headers

    Sections