General

  • Target

    1416-57-0x0000000000170000-0x0000000000192000-memory.dmp

  • Size

    136KB

  • MD5

    6cc7f89086e6178990026b537f7ea684

  • SHA1

    12bd49183d9a380b2968d4c23a9f3942bcfe1cfc

  • SHA256

    eb1f2f5bc87e7eba16e9e725c4f6ad5656b31549fa480a52eb077ff85be7cf57

  • SHA512

    b0185093862871ba48bd75412e957c9ba45d7471453fbc5faa2196296a418a9d8fb0fa6cb622bda989850f3befda1906e3e49368d9d4dafbdf05e41e72650762

  • SSDEEP

    3072:kf0SYtA9nahTpwx+CRA4vJkE96MTBfNwYiH:kf39ahTpwta4vJn96MTBlDiH

Score
10/10

Malware Config

Extracted

Family

qakbot

C2

78.94.148.92:1753

134.180.185.240:32987

201.136.101.182:38323

124.77.95.5:46163

196.90.29.190:30693

187.144.110.117:36330

10.44.33.140:65267

162.117.200.91:29984

159.254.223.192:31154

11.239.81.233:37

31.248.76.23:24072

224.77.182.18:55579

124.230.27.11:44408

205.255.39.94:54675

192.1.213.104:14212

145.3.120.239:20068

242.199.30.106:9157

243.240.195.106:42825

74.234.32.185:42698

102.51.5.67:47820

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1416-57-0x0000000000170000-0x0000000000192000-memory.dmp
    .dll windows x86


    Headers

    Sections