General

  • Target

    c6077ec7a088259558bc77dd0f0681a1c020d4feaa52a15bf056e5d1351b2b19.bin

  • Size

    126KB

  • MD5

    3ff9d9dbf8c7a6865faeb43188afa6b4

  • SHA1

    ba88ec57e854982e1bb7dbe4239b41c4b2b8c6a4

  • SHA256

    c6077ec7a088259558bc77dd0f0681a1c020d4feaa52a15bf056e5d1351b2b19

  • SHA512

    53e12acbfb932e606e30b7c174729c88c98cf0a63e9ac0b03776098a2087f5f7397baf4edacfd29802c77b57132a9a959c5f1d4fd41862e326e709bdfe39a6ed

  • SSDEEP

    3072:FV9GWm/WPuPuZji5rPSASJDgfMBTBfQIoMh:fm/WGPuZj83SJEfMBTBoIv

Score
10/10

Malware Config

Extracted

Family

qakbot

Version

403.780

Botnet

azd

Campaign

1661969003

C2

72.252.157.93:990

72.252.157.93:995

187.172.230.151:443

46.107.48.202:443

70.46.220.114:443

173.189.167.21:995

93.48.80.198:995

99.232.140.205:2222

89.211.179.14:2222

37.210.148.30:995

182.191.92.203:995

41.228.22.180:443

70.51.153.182:2222

47.180.172.159:443

47.23.89.61:993

173.21.10.71:2222

208.107.221.224:443

76.25.142.196:443

63.143.92.99:995

24.158.23.166:995

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Signatures

Files

  • c6077ec7a088259558bc77dd0f0681a1c020d4feaa52a15bf056e5d1351b2b19.bin
    .dll regsvr32 windows x86

    0ac722e57c2c4e9d17a175801fddbcc5


    Headers

    Imports

    Exports

    Sections