Overview

overview

10

Static

static

10

1940-60-0x...ry.dll

windows7-x64

3

1940-60-0x...ry.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1940-60-0x0000000000930000-0x000000000095A000-memory.dmp

  • Size

    168KB

  • MD5

    5feed9285bfd8e165ff2e68ff0b109fc

  • SHA1

    f9b232c4b0f7030cd810ed16e6d2e7a29045acfe

  • SHA256

    33dcd71f19c78e6f8912f191d7c797c735ef719c34847d70455094a9d75622a9

  • SHA512

    3a339604c237c2c4fd7a3776cd52cec2ae8f40899cce8917af601ed00fb93113bcd5b435c87036ae4062b532ee3b2aab33921b85ea0987d8c933ba8cc3d70c88

  • SSDEEP

    3072:O4+3EYn4daxwQf2lCoWUiLAh4Jz99ksTBf1cva83c3O/ya:3Y4dA7+ZWUic+Jx9ksTBNn83ce/

Score
10/10
bb061668683197qakbot

Malware Config

Extracted

Family

qakbot

Version

404.30

Botnet

BB06

Campaign

1668683197

C2

23.240.47.58:995

12.172.173.82:465

91.169.12.198:32100

94.63.65.146:443

80.13.179.151:2222

64.207.237.118:443

24.206.27.39:443

83.114.60.6:2222

86.171.75.63:443

86.195.32.149:2222

170.253.25.35:443

92.185.204.18:2078

157.231.42.190:995

170.249.59.153:443

174.101.111.4:443

116.74.163.152:443

76.80.180.154:995

180.151.104.143:443

86.130.9.167:2222

86.99.15.243:2222
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1940-60-0x0000000000930000-0x000000000095A000-memory.dmp
    .dll windows x86


    Headers

    Sections