Overview

overview

10

Static

static

10

1064-59-0x...ry.dll

windows7-x64

3

1064-59-0x...ry.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1064-59-0x0000000000290000-0x00000000002BA000-memory.dmp

  • Size

    168KB

  • MD5

    e1460b2fc0087fba735dfc0401fb815a

  • SHA1

    173b0b7ecd72d0ee12af424edfc59adab07d308a

  • SHA256

    594e79157e24f92ba2e362a39249cb0b2523b4c480a378c16fa3208de150e52f

  • SHA512

    0d00beb167b32b8fdd7bd9bb121d28aa5e6ac4502ba2bca930b9ee22232bbbefc97d7d341db7d503d246a55ebbcee9cf2a20a8b3aa57a5349bea7d846ce4ead1

  • SSDEEP

    3072:m4WN6C6wcu4nCDiabGQN06y0RA+JJnVwITBfJeva8318yO/ya:Nni/qk06y0a+JBVwITBBN8318N/

Score
10/10
obama2231668757345qakbot

Malware Config

Extracted

Family

qakbot

Version

404.30

Botnet

obama223

Campaign

1668757345

C2

68.47.128.161:443

87.65.160.87:995

172.90.139.138:2222

86.175.128.143:443

12.172.173.82:465

71.247.10.63:2083

47.41.154.250:443

91.254.215.167:443

71.31.101.183:443

81.229.117.95:2222

24.4.239.157:443

41.99.177.175:443

92.149.205.238:2222

73.230.28.7:443

47.229.96.60:443

186.188.2.193:443

174.112.25.29:2078

84.35.26.14:995

86.130.9.167:2222

116.74.163.221:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1064-59-0x0000000000290000-0x00000000002BA000-memory.dmp
    .dll windows x86


    Headers

    Sections