General

  • Target

    3b4770892d8a8ccac1b96c40d368b08ec9d91e7ac8505b6437d0e7b619a3bbfe.dll

  • Size

    133KB

  • MD5

    6122cb7921aaa36c149a0082e5d8cf78

  • SHA1

    960723d9941849279fa4f5bd65e7156e884e6a1a

  • SHA256

    3b4770892d8a8ccac1b96c40d368b08ec9d91e7ac8505b6437d0e7b619a3bbfe

  • SHA512

    83fc87074701460ef087dfa6b83fb2e380440da2d1338c5b677531eda5b149d219955739081f274a7a07b2ab478334f51b37962af63d246a5d06f4bc396fe712

  • SSDEEP

    3072:8Uu9pqH8UHJo3VE79mCE+MCuAoyJpRnfwTBfPZAn9:8QHJolEECECbnJrnfwTBHin9

Score
10/10

Malware Config

Extracted

Family

qakbot

Version

404.66

Botnet

BB17

Campaign

1677576236

C2

73.165.119.20:443

80.13.205.69:2222

202.142.98.62:995

14.192.241.76:995

90.104.22.28:2222

74.92.243.113:50000

184.155.91.69:443

12.172.173.82:990

47.34.30.133:443

73.161.176.218:443

27.0.48.233:443

188.49.116.2:995

24.239.69.244:443

12.172.173.82:21

92.239.81.124:443

84.35.26.14:995

91.165.188.74:50000

12.172.173.82:465

172.248.42.122:443

103.140.174.19:2222

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 3b4770892d8a8ccac1b96c40d368b08ec9d91e7ac8505b6437d0e7b619a3bbfe.dll
    .dll windows x86

    b70e2d870f81cd9daf7c6a2654df653e


    Headers

    Imports

    Exports

    Sections