General

  • Target

    1428-57-0x00000000002C0000-0x00000000002E2000-memory.dmp

  • Size

    136KB

  • MD5

    5ba5635a9c22a6ce961fcf125f64c929

  • SHA1

    4bb35fc5d12bec140ba42e203b610da309c8a9f6

  • SHA256

    2b2dc8084869cd41ab113b0e9ccb35917caa3e5893afcab51ccc1d5520acc964

  • SHA512

    a93f7f1ccb229de74333a3ddd37dc054c1997f1898c656d4016a9c2f9013c191bde4326edbcfa20ec8a3c57f83ea639cf2c6e0e355dbe7e6f8d03b2a1bf65e2b

  • SSDEEP

    3072:zShcwKsDenDDFK+nicxvim5lfp6ACPJP7r+YTBfJNY7+7:zceum5lxvCPJTr+YTBhC7+7

Score
10/10

Malware Config

Extracted

Family

qakbot

C2

221.44.158.12:15899

135.59.24.163:19546

94.7.79.144:54878

227.150.243.114:39154

215.194.96.116:37650

45.64.184.122:25478

85.137.184.169:59234

107.26.25.92:56712

226.156.21.185:57237

29.90.187.89:14834

206.16.38.205:59801

155.151.97.59:36109

47.219.184.104:36930

252.7.46.182:4067

140.243.25.205:24064

94.93.131.253:65187

28.236.43.99:25246

110.175.218.118:43672

159.220.92.54:39126

233.60.229.213:1774

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1428-57-0x00000000002C0000-0x00000000002E2000-memory.dmp
    .dll windows x86


    Headers

    Sections