General

  • Target

    1808-57-0x0000000000170000-0x0000000000192000-memory.dmp

  • Size

    136KB

  • MD5

    e7712e5f85e341fca260f0532e25e378

  • SHA1

    5635fb4834bca1bd81c01ffa947af4e1c141a638

  • SHA256

    b1f948218b9239ee662bb8beaedcabd568fbce71bd242aa56c3d393ea241632b

  • SHA512

    f67be5817fe790068cba5faeb792e4719d3491053328f6570067f509227b618c02f238797379b68e218e8b989e26a365d6ba4f38693034d9fb97b76ad7d5c737

  • SSDEEP

    3072:kf0SYtA9nahTpwx+CRA4vJkE96MTBfNwYin:kf39ahTpwta4vJn96MTBlDin

Score
10/10

Malware Config

Extracted

Family

qakbot

C2

78.94.148.92:1753

134.180.185.240:32987

201.136.101.182:38323

124.77.95.5:46163

196.90.29.190:30693

187.144.110.117:36330

10.44.33.140:65267

162.117.200.91:29984

159.254.223.192:31154

11.239.81.233:37

31.248.76.23:24072

224.77.182.18:55579

124.230.27.11:44408

205.255.39.94:54675

192.1.213.104:14212

145.3.120.239:20068

242.199.30.106:9157

243.240.195.106:42825

74.234.32.185:42698

102.51.5.67:47820

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1808-57-0x0000000000170000-0x0000000000192000-memory.dmp
    .dll windows x86


    Headers

    Sections