General

  • Target

    3680-133-0x0000000000FC0000-0x0000000000FE2000-memory.dmp

  • Size

    136KB

  • MD5

    3d80fbb9d7eacb6dded013738abdacf2

  • SHA1

    cb2fc11076fa7c8265ac29f3cfe35b7863c85847

  • SHA256

    afc06ed88010e1a2a2b60adcb95c25c1bee71cf7b61d09ec4fd49dcfab294b17

  • SHA512

    84c3d2004c323652c703ef46c6ece1671b223cc3d3ad2bdaba2c7622e589f9a04b340bb2b7fd667d0899918757b3b589721872dc285c73701c4974e764001207

  • SSDEEP

    1536:O5t669fQhfCQLD4UTqdnISVzLvE0BA4rrzkJpCCGURIO0nToIfpZBCmNgqHu:O58HgKqdISVzTEMAjJ0Cr7YTBfpqiO

Score
10/10

Malware Config

Extracted

Family

qakbot

C2

75.116.87.44:14933

64.55.103.194:9151

80.214.68.88:40730

97.184.129.40:2118

216.44.143.70:26851

239.39.127.10:38876

57.33.10.57:17737

201.128.252.151:58865

211.76.239.250:34506

124.58.65.86:13247

41.8.154.58:7614

6.55.240.195:27003

139.242.121.12:23370

8.81.30.103:64297

168.13.24.67:37382

17.219.125.20:59669

136.66.66.194:40287

63.172.177.141:57252

195.44.25.26:29277

67.212.106.154:59890

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 3680-133-0x0000000000FC0000-0x0000000000FE2000-memory.dmp
    .dll windows x86


    Headers

    Sections