General

  • Target

    2004-57-0x00000000001E0000-0x0000000000202000-memory.dmp

  • Size

    136KB

  • MD5

    9044a04e0ebe337ba58b77dc05022cdd

  • SHA1

    2c325c63c6a5a9ca15bc443e403553138e1cfc92

  • SHA256

    d9d8c88aee751b12b2d7f47a32bda3c86867e711aeb473e72222f17cfbc4293e

  • SHA512

    d41cda072bc01728dd50fa4ffe7ad6f214b867a7525c1cb32ed76d9b607641fa094b7e2f6022dfbd9705127ad8761d23ded176ca7e6f675af17a440689395147

  • SSDEEP

    3072:jqSkfjVMD6pChvtxrpwA+fJddHzMTBfdXYKB:jAVM+ohvtVpF+fJPHzMTB1IKB

Score
10/10

Malware Config

Extracted

Family

qakbot

C2

156.36.22.250:12263

73.225.210.175:40922

19.138.81.187:38748

191.101.43.136:10968

145.20.244.169:39814

74.30.254.35:15530

138.94.26.23:49965

218.175.98.133:15428

181.245.40.43:1982

24.10.174.212:30807

253.219.195.173:1546

51.182.7.163:21304

191.68.117.56:28754

246.29.132.217:16625

149.181.112.217:33637

136.20.21.112:41199

80.65.15.199:35765

0.222.227.111:63041

209.240.1.52:53226

66.57.60.202:19263

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 2004-57-0x00000000001E0000-0x0000000000202000-memory.dmp
    .dll windows x86


    Headers

    Sections