General

  • Target
    1836-57-0x0000000000740000-0x0000000000762000-memory.dmp
  • Size 136KB
  • Sample220712-j4v9aacdb6
  • SHA256 97715b931d74b19b1cc32fbc457ab18422335b116a71a5895fc701dd7e279be8
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • qakbot

Version
  • 403.780

Botnet
  • obama200

Campaign
  • 1657548298

C2
  • 172.115.177.204:2222

  • 89.101.97.139:443

  • 186.90.153.162:2222

  • 38.70.253.226:2222

  • 120.150.218.241:995

  • 72.252.157.93:995

  • 72.252.157.93:993

  • 94.36.193.176:2222

  • 47.23.89.60:993

  • 89.211.209.234:2222

  • 76.25.142.196:443

  • 46.100.25.239:61202

  • 24.158.23.166:995

  • 69.14.172.24:443

  • 92.132.132.81:2222

  • 37.34.253.233:443

  • 93.48.80.198:995

  • 174.80.15.101:2083

  • 24.178.196.158:2222

  • 197.89.20.137:443

Attributes
  • salt

    jHxastDcds)oMc=jvh7wdUhxcsdt2

Signatures

File Explorer

  • 1836-57-0x0000000000740000-0x0000000000762000-memory.dmp
    .dll 136KB

1836-57-0x0000000000740000-0x0000000000762000-memory.dmp

  • SHA256 97715b931d74b19b1cc32fbc457ab18422335b116a71a5895fc701dd7e279be8
  • MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
25884
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths