General

  • Target

    3240000.dll

  • Size

    133KB

  • MD5

    0db4bd5c133243033b67064dadb14d50

  • SHA1

    a11628ea45cc26ab2bdef0c0aa2843c8c455cf65

  • SHA256

    62d6a27977b69881d784b4bbc6ca1964ea14563ecccf08e35ccff9f3d6c62f99

  • SHA512

    5d9ac23c4bafdf64be940f3f3276b0d712e5ecad988694c79d837d6fa6977ae7483bd6c47540e88b0bd121f283fd1efb764a2439f63a9d5d92df4770d42c8300

  • SSDEEP

    3072:YKUR+AIznCp7BQCrZJzSWjsdA0Jl0nO8TBfPeo/n:YbIznCVKCtcWjs+0J6nO8TBHeo/n

Score
10/10

Malware Config

Extracted

Family

qakbot

Version

404.506

Botnet

tok01

Campaign

1676371257

C2

182.180.105.242:443

87.149.176.97:443

85.59.61.52:2222

216.228.41.244:2222

174.58.146.57:443

103.42.86.110:995

147.219.4.194:443

89.32.157.195:995

76.80.180.154:995

79.67.165.149:995

71.31.101.183:443

198.2.51.242:993

88.111.182.118:2222

72.203.216.98:2222

72.80.7.6:995

12.172.173.82:32101

50.68.204.71:995

209.142.97.83:995

82.121.195.187:2222

81.229.117.95:2222

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 3240000.dll
    .dll windows x86

    1bd51003f5494b32d39257bf6bbbb175


    Headers

    Imports

    Exports

    Sections