Overview

overview

10

Static

static

10

1596-57-0x...ry.dll

windows7-x64

3

1596-57-0x...ry.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1596-57-0x0000000000200000-0x000000000022A000-memory.dmp

  • Size

    168KB

  • Sample

    221210-a1nwcshe41

  • MD5

    2e17f10da407744959fce4ca94fa4fc4

  • SHA1

    6ad8c4e2afa6dbfeeb344a8cc5d0e4e648d59af9

  • SHA256

    3fc2e61f7f721fa3b96172f6221b30a5d5f03da32956b5ca18052cc9bdef9277

  • SHA512

    862e79d053e4beacc92bc50c8c6939114abb431875efe9bbf080f2684e30541dcda309e27028f6f91b60588a7ec8a26b83df22a6da9733b43d880d4b12836551

  • SSDEEP

    3072:SgiSH5HRFVScyzTBxwAWJKwTyxnTBfZynO/yaGv:FdrVXyXBxFWJpTOnTBxyO/

Score
10/10
qakbotbb091670238005

Malware Config

Extracted

Family

qakbot

Version

404.46

Botnet

BB09

Campaign

1670238005

C2

76.100.159.250:443

66.191.69.18:995

186.64.67.9:443

50.90.249.161:443

109.150.179.158:2222

92.149.205.238:2222

86.165.15.180:2222

41.44.19.36:995

78.17.157.5:443

173.18.126.3:443

75.99.125.235:2222

172.90.139.138:2222

27.99.45.237:2222

91.68.227.219:443

12.172.173.82:993

103.144.201.62:2078

12.172.173.82:990

173.239.94.212:443

91.169.12.198:32100

24.64.114.59:2222
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      1596-57-0x0000000000200000-0x000000000022A000-memory.dmp

    • Size

      168KB

    • MD5

      2e17f10da407744959fce4ca94fa4fc4

    • SHA1

      6ad8c4e2afa6dbfeeb344a8cc5d0e4e648d59af9

    • SHA256

      3fc2e61f7f721fa3b96172f6221b30a5d5f03da32956b5ca18052cc9bdef9277

    • SHA512

      862e79d053e4beacc92bc50c8c6939114abb431875efe9bbf080f2684e30541dcda309e27028f6f91b60588a7ec8a26b83df22a6da9733b43d880d4b12836551

    • SSDEEP

      3072:SgiSH5HRFVScyzTBxwAWJKwTyxnTBfZynO/yaGv:FdrVXyXBxFWJpTOnTBxyO/

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks