Overview

overview

10

Static

static

10

f378ac37b7...b1.dll

windows7-x64

3

f378ac37b7...b1.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    f378ac37b71e821512e4356d8615619f26930129b13bee5acb01ec66ec997cb1.dll

  • Size

    132KB

  • MD5

    39eba7d9f6d553fca79eb95ea134c8f0

  • SHA1

    923193ebdc7bea748763c154b07621cbf85a0804

  • SHA256

    f378ac37b71e821512e4356d8615619f26930129b13bee5acb01ec66ec997cb1

  • SHA512

    97da6979fb6db02442bdda48a7b0068b1c1062f079a2c7cde353bbcca675139819679c4d4f0499f0d075f943e1c316d669b7aef5171c11bac169f96803d76928

  • SSDEEP

    3072:7g0KGh5Z8j3EzihlFsUA9QJb4VMH58TBff57Q:rKGJGEz+lOB2JEVMH58TB3RQ

Score
10/10
bb261683279184qakbot

Malware Config

Extracted

Family

qakbot

Version

404.1035

Botnet

BB26

Campaign

1683279184

C2

27.109.19.90:2078

109.56.235.133:443

92.20.204.198:2222

98.145.23.67:443

50.68.204.71:995

151.55.186.41:443

12.172.173.82:21

70.28.50.223:3389

94.59.122.53:2222

12.172.173.82:32101

24.206.27.39:443

91.169.12.198:32100

12.172.173.82:993

2.82.8.80:443

104.35.24.154:443

5.30.216.183:443

50.68.204.71:443

12.172.173.82:995

103.140.174.20:2222

173.88.135.179:443
Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

  • Qakbot family
    qakbot
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f378ac37b71e821512e4356d8615619f26930129b13bee5acb01ec66ec997cb1.dll
    .dll windows x86

    0141f24aaf1b810b9fcc5f6886f26f14


    Headers

    Imports

    Exports

    Sections