Overview

overview

10

Static

static

10

b1b805c4d9...fa.dll

windows7-x64

7

b1b805c4d9...fa.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b1b805c4d99c57a4e85ec8b640741db28550ec99ac173777fb4c53ce794d55fa.dll

  • Size

    133KB

  • MD5

    a12dd4324bbf1129d9fae1b3d1e6b9ca

  • SHA1

    302b9664c8f7804a9f2085ce7d452796c6658017

  • SHA256

    b1b805c4d99c57a4e85ec8b640741db28550ec99ac173777fb4c53ce794d55fa

  • SHA512

    2be1d31bb9f709426930c26dce34b3cd125f2ee367ffbc85a726653f39166fa6ed5ca6d660f4056d62c1b6ae21a6cab4d1c699b4500538089c52dc068d15aead

  • SSDEEP

    3072:vySCR7EjSC039FFClajmDUUAfJ9UnUHTBfP/G4:vQEjSC0NTCZDUBfJ6nUHTBH/G

Score
10/10
bb121675161116qakbot

Malware Config

Extracted

Family

qakbot

Version

404.432

Botnet

BB12

Campaign

1675161116

C2

103.252.7.228:443

87.10.205.117:443

82.15.58.109:2222

72.80.7.6:995

90.162.45.154:2222

47.34.30.133:443

50.68.204.71:993

112.141.184.246:995

73.165.119.20:443

91.169.12.198:32100

173.18.126.3:443

87.56.238.53:443

85.241.180.94:443

12.172.173.82:50001

92.154.17.149:2222

103.42.86.246:995

12.172.173.82:990

91.254.132.23:443

121.121.100.207:995

74.92.243.113:50000
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • b1b805c4d99c57a4e85ec8b640741db28550ec99ac173777fb4c53ce794d55fa.dll
    .dll windows x86

    1bd51003f5494b32d39257bf6bbbb175


    Headers

    Imports

    Exports

    Sections