General

  • Target

    2d90000.dll

  • Size

    168KB

  • MD5

    d77ce1693c7809bb5a38a6d2235545ae

  • SHA1

    2396ccb7957476085eacb7bb6e3e5b99a7a873af

  • SHA256

    5d111ecc2ea0919b641b48a6e0d907466557ebec1a6f5369da93c44abeb16697

  • SHA512

    250b80194055783a2284adde4c03eb8761623bfc070c3f292b844d5f089c5a23da34eeecd597af35e7f15990019f0c41249324087e72d510c5f3759e4a51ee22

  • SSDEEP

    3072:BLsrdIkOMe0R0+68PxBG4AnJbhzr7TBfZ9ByO/yanCFJ:2Ij0y+6wxYdnJdzr7TBR9BN/Py

Malware Config

Extracted

Family

qakbot

Version

404.60

Botnet

obama230

Campaign

1671447345

C2

108.162.6.34:443

45.152.16.14:443

87.65.160.87:995

109.220.196.24:2222

86.176.144.240:2222

73.36.196.11:443

70.66.199.12:443

2.99.47.198:2222

171.97.42.82:443

71.31.101.183:443

74.33.196.114:443

75.158.15.211:443

12.172.173.82:32101

45.248.169.101:443

174.104.184.149:443

90.66.229.185:2222

98.145.23.67:443

152.170.17.136:443

86.160.253.56:443

89.152.120.181:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 2d90000.dll
    .dll windows x86

    bb8f7c7fc8b521232817f0f359bdf0f2


    Headers

    Imports

    Exports

    Sections