Overview

overview

10

Static

static

10

828-57-0x0...ry.dll

windows7-x64

3

828-57-0x0...ry.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    828-57-0x0000000000A20000-0x0000000000A5A000-memory.dmp

  • Size

    232KB

  • Sample

    230202-nxfmgaaa3t

  • MD5

    b1a81592bffefed2125286c321cc2fdd

  • SHA1

    7d686d7e4966ab5c4ded03eb01ceb9452a413dea

  • SHA256

    b15dcbfc0b11eaba752ba63381fa4a8d582559d2b26a0a1286701ffb63b18550

  • SHA512

    7bbe2ce7325818eb22a5eae8d150e280fe6ab85fd1d3f483c7be7f05be9770b037f90307e938426e02b3459620e66c70fb2b7edf91f5adfd232b5616a517434b

  • SSDEEP

    6144:GgAsop2KgPCGXYbUJtJpjTBAcitkcKn7:GTs9KgaGXmUJrpjTun7Kn7

Score
10/10
qakbotbb121675326103

Malware Config

Extracted

Family

qakbot

Version

404.447

Botnet

BB12

Campaign

1675326103

C2

47.203.227.114:443

1.162.248.14:27393

187.1.1.90:26646

98.145.23.67:443

1.70.77.116:59649

187.0.1.74:8644

12.172.173.82:995

1.109.159.118:15368

187.1.1.182:46185

86.130.9.182:2222

1.217.128.91:50184

70.66.199.12:443

1.27.109.19:23048

209.1.1.184:39300

174.104.184.149:443

1.81.151.102:57345

187.1.1.47:8734

87.202.101.164:50000

1.73.165.119:5121

181.118.206.65:995
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Targets

    • Target

      828-57-0x0000000000A20000-0x0000000000A5A000-memory.dmp

    • Size

      232KB

    • MD5

      b1a81592bffefed2125286c321cc2fdd

    • SHA1

      7d686d7e4966ab5c4ded03eb01ceb9452a413dea

    • SHA256

      b15dcbfc0b11eaba752ba63381fa4a8d582559d2b26a0a1286701ffb63b18550

    • SHA512

      7bbe2ce7325818eb22a5eae8d150e280fe6ab85fd1d3f483c7be7f05be9770b037f90307e938426e02b3459620e66c70fb2b7edf91f5adfd232b5616a517434b

    • SSDEEP

      6144:GgAsop2KgPCGXYbUJtJpjTBAcitkcKn7:GTs9KgaGXmUJrpjTun7Kn7

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks