General

  • Target

    Unpacked_Hash_a8a8ebe59ca3a4f61f37679c8d109a99cb365f0400c5061cc7149d5c9f3a2213.bin

  • Size

    132KB

  • MD5

    12e11f7def78fc1af7d5080ac3fcd749

  • SHA1

    23813bdfdef572603e94dd777301d4e0d99ce860

  • SHA256

    a8a8ebe59ca3a4f61f37679c8d109a99cb365f0400c5061cc7149d5c9f3a2213

  • SHA512

    f64b729f4111f29281b5b33bc01934e514df1f5f4e36e792bd0df1f9eb6e303704376868128a8203c149f0825683c60a6b6459e28bff4f754bd75735b5e9ad38

  • SSDEEP

    3072:MjPR4nxKRttVbYKAk67CERzMRAPJyDnQMTBfPuq:MHRxbYK0CEMaPJynQMTBHN

Malware Config

Extracted

Family

qakbot

Version

404.263

Botnet

obama243

Campaign

1678889958

C2

91.196.69.245:443

90.104.22.28:2222

37.14.229.220:2222

88.126.94.4:50000

92.159.173.52:2222

122.184.143.85:443

85.61.165.153:2222

86.195.14.72:2222

92.154.17.149:2222

47.203.229.168:443

98.187.21.2:443

70.51.152.61:2222

91.68.227.219:443

92.154.45.81:2222

88.122.133.88:32100

98.147.155.235:443

91.254.229.61:443

213.31.90.183:2222

174.118.36.28:443

197.14.148.149:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • Unpacked_Hash_a8a8ebe59ca3a4f61f37679c8d109a99cb365f0400c5061cc7149d5c9f3a2213.bin
    .dll windows x86

    b70e2d870f81cd9daf7c6a2654df653e


    Headers

    Imports

    Exports

    Sections