Overview

overview

10

Static

static

10

4f7658a0f2...c5.dll

windows7-x64

1

4f7658a0f2...c5.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4f7658a0f2f94f0e7b4d43b1af11fd16d545928b13ca75aaa253e8dbc2a12bc5.bin

  • Size

    168KB

  • MD5

    6a7d39a25c2789760aa3128fcaf1faf8

  • SHA1

    df080deb094f95aaff275f468bb24316c923f80d

  • SHA256

    4f7658a0f2f94f0e7b4d43b1af11fd16d545928b13ca75aaa253e8dbc2a12bc5

  • SHA512

    125fb2688df4d22e9100a1e359e0263e36638823663aa61820f2340d0303fc932f1eb8e392b218cb174eb0726c3a7f62b29e7fdd2bbf4c8c908016e9c80e5abc

  • SSDEEP

    3072:UwlxRPT5qJ0shdGoYOHlA4JrLlcSHTBfpvgyeO/ya+aY:lTOpeoYOHW4Jnl3HTBhv9B/

Score
10/10
bb061668492308qakbot

Malware Config

Extracted

Family

qakbot

Version

404.27

Botnet

BB06

Campaign

1668492308

C2

49.175.72.56:443

81.229.117.95:2222

47.41.154.250:443

69.133.162.35:443

84.35.26.14:995

68.47.128.161:443

156.217.219.147:995

87.65.160.87:995

174.101.111.4:443

82.127.174.33:2222

91.169.12.198:32100

24.28.121.122:443

157.231.42.190:995

90.89.95.158:2222

74.33.84.227:443

24.64.114.59:2222

80.13.179.151:2222

64.207.237.118:443

24.206.27.39:443

170.253.25.35:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 4f7658a0f2f94f0e7b4d43b1af11fd16d545928b13ca75aaa253e8dbc2a12bc5.bin
    .dll regsvr32 windows x86

    243b9f9082a56e7680f2feb8bfe22095


    Headers

    Imports

    Exports

    Sections