Overview

overview

10

Static

static

10

442d5c069f...c2.dll

windows7-x64

10

442d5c069f...c2.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    442d5c069f648ec5217ae098fbe5473ab653b7e4d61e8ad533e84517191597c2

  • Size

    158KB

  • MD5

    b2ce2919e3a8a4d0700a0e401564a0c6

  • SHA1

    abd6864891b865cf55949577a1266bed2e1b38c9

  • SHA256

    442d5c069f648ec5217ae098fbe5473ab653b7e4d61e8ad533e84517191597c2

  • SHA512

    1123750b32f2ade8b192e2b5395f7707fafe807c5569756c2e6f2f06a32a1690cc356bb0aa30a9c8597498d14fc6b5be6623b0b7dcd79caa5047107d2a489c52

  • SSDEEP

    3072:ygikbXp3BvScvqzzxVvAAWJ6AzaHTBfZSEO/yaURXv:1TdRXvqXxh1WJJzaHTBRSv/

Score
10/10
bb101670997897qakbot

Malware Config

Extracted

Family

qakbot

Version

404.46

Botnet

BB10

Campaign

1670997897

C2

49.175.72.56:443

64.237.214.193:443

79.77.142.22:2222

173.18.126.3:443

23.242.141.218:2222

121.121.100.148:995

172.90.139.138:2222

172.248.42.122:443

94.63.65.146:443

98.145.23.67:443

12.172.173.82:990

91.68.227.219:443

12.172.173.82:993

75.99.125.236:2222

49.245.119.12:2222

74.66.134.24:443

173.239.94.212:443

91.169.12.198:32100

184.68.116.146:2222

24.71.120.191:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 442d5c069f648ec5217ae098fbe5473ab653b7e4d61e8ad533e84517191597c2
    .dll windows x86

    bb8f7c7fc8b521232817f0f359bdf0f2


    Headers

    Imports

    Exports

    Sections