Overview

overview

10

Static

static

10

784-60-0x0...ry.dll

windows7-x64

3

784-60-0x0...ry.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    784-60-0x00000000001C0000-0x00000000001EA000-memory.dmp

  • Size

    168KB

  • Sample

    221119-25pr1aab7v

  • MD5

    eae3971ddfca2d747555554f2ed55703

  • SHA1

    f34c871558e867d243edab7720ec1870226f5c43

  • SHA256

    a64db0f91f08e3a99bde93faf047fe878cb1e0869a67fcb545947ddd476acc9f

  • SHA512

    6e3b84493d770fb183f54d266175bd81b3122d0bf498cdef4f902c918f827048d45f50683bc95ffde13a55f4417d3d5cfed0029bf3ad1b40f0463d821b00d1f1

  • SSDEEP

    3072:U4uOcRaqajLtA8bGVg+gAYJgGrRYTBf5Pva83JtO/yaa:WazvC6GVg+VYJxrRYTBR683J8/S

Score
10/10
qakbotbb061668752705

Malware Config

Extracted

Family

qakbot

Version

404.30

Botnet

BB06

Campaign

1668752705

C2

98.147.155.235:443

49.175.72.56:443

82.31.37.241:443

73.36.196.11:443

2.84.98.228:2222

188.54.79.88:995

184.153.132.82:443

74.66.134.24:443

172.117.139.142:995

12.172.173.82:990

24.64.114.59:3389

12.172.173.82:2087

78.92.133.215:443

24.64.114.59:2222

50.68.204.71:995

105.184.161.242:443

12.172.173.82:22

221.161.103.6:443

98.145.23.67:443

73.161.176.218:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      784-60-0x00000000001C0000-0x00000000001EA000-memory.dmp

    • Size

      168KB

    • MD5

      eae3971ddfca2d747555554f2ed55703

    • SHA1

      f34c871558e867d243edab7720ec1870226f5c43

    • SHA256

      a64db0f91f08e3a99bde93faf047fe878cb1e0869a67fcb545947ddd476acc9f

    • SHA512

      6e3b84493d770fb183f54d266175bd81b3122d0bf498cdef4f902c918f827048d45f50683bc95ffde13a55f4417d3d5cfed0029bf3ad1b40f0463d821b00d1f1

    • SSDEEP

      3072:U4uOcRaqajLtA8bGVg+gAYJgGrRYTBf5Pva83JtO/yaa:WazvC6GVg+VYJxrRYTBR683J8/S

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks