Overview

overview

10

Static

static

10

1944-58-0x...ry.dll

windows7-x64

3

1944-58-0x...ry.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1944-58-0x0000000000230000-0x000000000025A000-memory.dmp

  • Size

    168KB

  • MD5

    3fc455fca17b55ccf7d5f38fdf1dc76f

  • SHA1

    a78c3ce5c50f9925dda76170b18d99a6d4350c83

  • SHA256

    c86dd42f564dd64505d70fbf852bd5069d4dcf092fea145a125d49c219b4fb78

  • SHA512

    152464c4715572790303eccee2359e61854f36c8f12f0b82e10d0cdeb53f1f9c7580b04b30e20f7349abf363e6534f1dac79c32515d9f87cdcbfe1f7be433b6c

  • SSDEEP

    3072:e4+nqaIS0aBTcgfWcY2ESbA+JDeedzMTBf1Mva83MeO/ya:fS0QTX+J2ESM+JxdzMTBt383MB/

Score
10/10
obama2231668757345qakbot

Malware Config

Extracted

Family

qakbot

Version

404.30

Botnet

obama223

Campaign

1668757345

C2

68.47.128.161:443

87.65.160.87:995

172.90.139.138:2222

86.175.128.143:443

12.172.173.82:465

71.247.10.63:2083

47.41.154.250:443

91.254.215.167:443

71.31.101.183:443

81.229.117.95:2222

24.4.239.157:443

41.99.177.175:443

92.149.205.238:2222

73.230.28.7:443

47.229.96.60:443

186.188.2.193:443

174.112.25.29:2078

84.35.26.14:995

86.130.9.167:2222

116.74.163.221:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1944-58-0x0000000000230000-0x000000000025A000-memory.dmp
    .dll windows x86


    Headers

    Sections