General

  • Target

    1416-60-0x00000000001F0000-0x0000000000212000-memory.dmp

  • Size

    136KB

  • MD5

    9c632537243231fd36404280c598f07b

  • SHA1

    39e71eac102bac1b7f1d2a2b6e5bcbb9ea410bb7

  • SHA256

    edd3af3965a7028935f6a01ca8e74553010e6684a832a326555680dd3a8d6ec4

  • SHA512

    85a5a43c32063e2eba3ef4b686d674cdf2a37cb97e8b5a4cffd4a01c78a46b102da741230f352b536c569e17f4ab878feef4cfe0ad6f8c338fbc0a6821e7029d

  • SSDEEP

    1536:y24iKb4EzwCy0MVrSqilhSVAYFVmHJBAaktJJBlzpkIOYnToIfNW1CmNvqHu:ZIz8nSqilo6YF4HjAJJDltK8TBfNpyH

Score
10/10

Malware Config

Extracted

Family

qakbot

C2

99.221.33.122:35602

29.202.180.222:51620

23.94.40.182:4331

34.19.16.166:1288

241.163.135.223:50051

32.107.156.85:19172

228.49.142.11:64889

196.202.140.31:7400

110.114.87.194:23019

217.188.119.28:9613

29.44.169.79:27952

169.83.63.109:46511

47.65.80.200:49855

50.140.194.100:14738

152.64.159.219:41214

12.255.117.222:36282

199.246.11.177:40851

81.180.116.241:1057

87.3.215.226:21496

247.44.83.206:32161

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1416-60-0x00000000001F0000-0x0000000000212000-memory.dmp
    .dll windows x86


    Headers

    Sections