Overview

overview

10

Static

static

10

fwpolicyiomgr.dll

windows7-x64

10

fwpolicyiomgr.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fwpolicyiomgr.dll

  • Size

    156KB

  • MD5

    50ec7cac279ae9cc639f3bc220c6d9b3

  • SHA1

    4511601a140a0e78c83ee80538920a8a4bf609f8

  • SHA256

    5fb5b0c19b5cd855ce353df538c35dab7f74a1d00f2dbe2ccf06853b150e0dd6

  • SHA512

    acff6845e6987b4dfc18b18365c3e31eec2954b8df37b06bda72bbe9d5c408923d2b09ae5f8d01a85b03442ea80a46a49c93686763ccc16f5da768602334c2a6

  • SSDEEP

    3072:7bLJEsAXBFa2MAnJuXTx/TBf5cy30O/ya:HFJAXBjJnJqTx/TBxb3f/

Score
10/10
bb041666604608qakbot

Malware Config

Extracted

Family

qakbot

Version

403.1051

Botnet

BB04

Campaign

1666604608

C2

222.117.141.133:443

198.2.51.242:993

27.110.134.202:995

172.117.139.142:995

144.202.15.58:443

193.3.19.137:443

208.78.220.120:443

45.230.169.132:995

102.157.250.192:995

93.156.96.171:443

41.109.170.156:995

58.247.115.126:995

200.233.108.153:995

197.204.107.51:443

201.68.209.47:32101

156.220.185.41:993

37.8.67.5:443

181.164.194.228:443

156.197.230.148:995

175.205.2.54:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • fwpolicyiomgr.dll
    .dll regsvr32 windows x86

    4ec0fd278ac094f105aead49a4fff735


    Headers

    Imports

    Exports

    Sections