Overview

overview

10

Static

static

10

1928-54-0x...ry.dll

windows7-x64

1

1928-54-0x...ry.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1928-54-0x0000000000260000-0x0000000000284000-memory.dmp

  • Size

    144KB

  • MD5

    67326e8b4fd0169b0627fcc5d06a1cfb

  • SHA1

    8becec2bfd07721963c511ac8de49a22a4d002bc

  • SHA256

    aeb6a49df045c4ace11bf53dd892d7bc0a9f9eddbfd2025c266db1cece37b637

  • SHA512

    3dcdecdac3d6e0d8cee5ddf00924677480063f679a6f64072b86309e9ba394f706dbf3180b66d0dfa8fea034f3939f00c641b165c4dd3e922140e44460f434dd

  • SSDEEP

    3072:TeEdIsi0MeTHH95dlTvc5mAFJnuHCITBfvIDV0C:XzjHjdlTSDFJuHCITBnIb

Score
10/10
bb251682409935qakbot

Malware Config

Extracted

Family

qakbot

Version

404.1026

Botnet

BB25

Campaign

1682409935

C2

96.56.197.26:2222

151.30.34.144:443

217.165.239.223:443

91.82.4.46:443

151.213.66.34:995

81.111.108.123:443

88.171.156.150:50000

92.149.250.113:2222

92.189.214.236:2222

103.123.223.130:443

67.10.2.240:995

70.112.206.5:443

86.225.214.138:2222

172.248.42.122:443

147.219.4.194:443

24.139.11.137:443

74.92.243.115:50000

198.2.51.242:993

75.98.154.19:443

92.239.81.124:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

  • Qakbot family
    qakbot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1928-54-0x0000000000260000-0x0000000000284000-memory.dmp
    .dll windows x86


    Headers

    Sections