Overview

overview

10

Static

static

10

1772-55-0x...ry.dll

windows7-x64

1

1772-55-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1772-55-0x00000000007B0000-0x00000000007D3000-memory.dmp

  • Size

    140KB

  • MD5

    55d7928c1689847b9d316dd3089a4a1d

  • SHA1

    099a255557969d18f12d044a20662ff85b4f2d1d

  • SHA256

    189f87f4131de3abed856a1514928ae2d76ec546fb56149d8e682f90fe45873a

  • SHA512

    2667c7bb97c76907a9aeaec6507b3c39cd72fe9655c2a0ff56d7e18570c6a9a2b2c48cddce86029742895c638df0637fc1eb0fcfd3e81c9becf195c0372d0a37

  • SSDEEP

    3072:ZhuYkzdpOtvBSTH6M6NANSJgQVt8TBfvQjEnssm:g4tvB8H4OsJ3Vt8TBnQCss

Score
10/10
bb181678346091qakbot

Malware Config

Extracted

Family

qakbot

Version

404.226

Botnet

BB18

Campaign

1678346091

C2

114.143.176.235:443

92.154.17.149:2222

2.14.45.117:2222

84.108.200.161:443

109.11.175.42:2222

88.126.94.4:50000

87.202.101.164:50000

50.68.204.71:995

49.245.82.178:2222

12.172.173.82:32101

190.11.198.76:443

79.67.165.149:995

115.87.227.49:443

84.215.202.22:443

118.250.110.98:995

66.131.25.6:443

80.1.152.201:443

198.2.51.242:993

151.48.158.236:443

50.68.204.71:993
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1772-55-0x00000000007B0000-0x00000000007D3000-memory.dmp
    .dll windows x86


    Headers

    Sections