General

  • Target

    1708-151-0x0000000010000000-0x0000000010023000-memory.dmp

  • Size

    140KB

  • MD5

    ba75b75c8e6e980ce8ed9ded4869ae3c

  • SHA1

    ab23c20ed497edfed6611ce9b4434009ddfb245c

  • SHA256

    2c7644ed3a095934667c86a045e8548721a1bb3d83225d81d791b1eb21ab4ac9

  • SHA512

    c397a0d150ffa989faa33c1380992d907d001885e1539f2f682254d87ddf4e88dc28e3a20acd7621a107db3f017ad5d52274660e2f448ca272a71cd4868a2911

  • SSDEEP

    3072:UjPR4nxKRttVbYKAk67CERzMRAPJyDnbMTBfPuq:UHRxbYK0CEMaPJynbMTBHN

Score
10/10

Malware Config

Extracted

Family

qakbot

Version

404.263

Botnet

BB19

Campaign

1678819882

C2

162.248.14.107:443

89.32.159.107:995

50.68.186.195:443

50.68.204.71:443

24.69.84.237:443

92.239.81.124:443

149.74.159.67:2222

176.202.46.81:443

2.82.8.80:443

72.203.216.98:2222

73.22.121.210:443

190.218.125.145:443

76.71.137.91:2222

81.158.112.20:2222

190.191.35.122:443

12.172.173.82:993

98.145.23.67:443

12.172.173.82:22

37.186.55.60:2222

73.161.176.218:443

Attributes
  • salt

    SoNuce]ugdiB3c[doMuce2s81*uXmcvP

Signatures

Files

  • 1708-151-0x0000000010000000-0x0000000010023000-memory.dmp
    .dll windows x86


    Headers

    Sections