Overview

overview

10

Static

static

10

d04caa7719...f7.dll

windows7-x64

10

d04caa7719...f7.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ca7ff9ea5d5518479d8a2d5e06f3b0e.bin

  • Size

    80KB

  • MD5

    011b0ba1e0b98997a0d8ae516f2520a6

  • SHA1

    9f2cddb623a6047dc852deae7e3ac4ce06aed320

  • SHA256

    3b75ee0674b078689f9acabcb4ad3d53271f8dd8d743162b77eeb14b6c7b5caf

  • SHA512

    b48a8b86f18b4421971b2ead17834a81fda08124ab8c983f24003b16a345fb27398853df31b14d88bfdf946289df16d75458116bf843a8e5a3033f9c93b266e9

  • SSDEEP

    1536:taMYMEs1Lks34aZihdmTAlfu2gZKpJA/W+ag+lGyJJgY8pTswz6Uk:cz2LkEnZihITOuBeJA/WRrJgYOAL

Score
10/10
obama1941656313665qakbot

Malware Config

Extracted

Family

qakbot

Version

403.780

Botnet

obama194

Campaign

1656313665

C2

70.46.220.114:443

32.221.224.140:995

67.209.195.198:443

186.90.153.162:2222

148.64.96.100:443

67.165.206.193:993

86.200.151.188:2222

80.11.74.81:2222

173.174.216.62:443

45.241.173.232:993

41.228.22.180:443

1.161.81.21:995

24.178.196.158:2222

37.34.253.233:443

93.48.80.198:995

129.208.158.180:995

120.150.218.241:995

38.70.253.226:2222

111.125.245.116:995

47.23.89.60:993
Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Signatures

Files

  • 4ca7ff9ea5d5518479d8a2d5e06f3b0e.bin
    .zip

    Password: infected

  • d04caa7719610bd0aa0dd1cda75fe73365479b059968b75cf3a9e3fd41ad5ef7.dll
    .dll regsvr32 windows x86

    Password: infected

    0ac722e57c2c4e9d17a175801fddbcc5


    Headers

    Imports

    Exports

    Sections