General

  • Target

    1792-57-0x0000000000640000-0x0000000000662000-memory.dmp

  • Size

    136KB

  • MD5

    d56b5e479c008204954ecc79d21ecc15

  • SHA1

    a12f792eb2430a91747dd46a87ea9dc09f665cb0

  • SHA256

    915aa3df48a5023367e440462853589150476e9900acaf41ada7b822a5abf465

  • SHA512

    9c9ef25a7ac52c8fbbed6db9e96f293500f88497a866a3aca893ad733adee3c36b4a9931b9fe55b767d33f78cb9e6de26de29a2e9f13e1a359b862c49763dc02

  • SSDEEP

    3072:CB8dAWOHXLL2z6eJdwMYyiACPJnDLQoTBfJ1YqB:TU2OeJdAynCPJDLQoTBh6qB

Score
10/10

Malware Config

Extracted

Family

qakbot

C2

156.36.22.250:12263

73.225.210.175:40922

19.138.81.187:38748

191.101.43.136:10968

145.20.244.169:39814

74.30.254.35:15530

138.94.26.23:49965

218.175.98.133:15428

181.245.40.43:1982

24.10.174.212:30807

253.219.195.173:1546

51.182.7.163:21304

191.68.117.56:28754

246.29.132.217:16625

149.181.112.217:33637

136.20.21.112:41199

80.65.15.199:35765

0.222.227.111:63041

209.240.1.52:53226

66.57.60.202:19263

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1792-57-0x0000000000640000-0x0000000000662000-memory.dmp
    .dll windows x86


    Headers

    Sections