General

  • Target

    1836-61-0x00000000001D0000-0x00000000001F2000-memory.dmp

  • Size

    136KB

  • MD5

    bd7e786c8538b9aae0c7ae337709a643

  • SHA1

    8ad1b902323a847e2e7c13787f8b477cca44da4e

  • SHA256

    59caa3741d10b75f4351183362e4ad98dab0c2700339355f1283ed9724dd6030

  • SHA512

    16f6e09ac8567e1b03545607d031a69a68a8200ae6aa7a6cde123b3adadf4885275e7b80903fecf7cf70210e14838c9b6c4915a568aa9f0e3b745634220d438f

  • SSDEEP

    3072:cHI+ct60UvCXZecOLbAQPJ2i1BwTBfZWYyR:sJfqXZec6MQPJj1BwTBxdyR

Malware Config

Extracted

Family

qakbot

Version

403.914

Botnet

obama210

Campaign

1665041236

C2

41.104.205.128:443

134.35.6.76:443

197.202.163.4:443

181.164.194.228:443

105.159.124.224:443

197.158.89.85:443

41.96.33.236:443

181.141.3.126:443

123.22.7.132:443

163.182.177.80:443

41.248.72.229:8443

41.100.62.129:443

68.83.169.91:443

190.29.228.61:443

160.176.249.11:995

41.107.54.99:443

94.52.127.44:443

105.69.155.85:995

45.227.251.167:2222

197.206.141.97:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1836-61-0x00000000001D0000-0x00000000001F2000-memory.dmp
    .dll windows x86


    Headers

    Sections