qakbot | cb6482a720030ffef0799c6743bb134a71962531a05f38c5706449985ca37d52 | Triage

Sharing

General

Target

SecuriteInfo.com.Win32.Kryptik.HDBX.579
Size

1.8MB
Sample

201109-cy65fkcmq6
MD5

e139969d784f0fa5a453c1c61f567461
SHA1

4b78b16a38c6eb1a743efe2094026b5aadf6e737
SHA256

cb6482a720030ffef0799c6743bb134a71962531a05f38c5706449985ca37d52
SHA512

0b9e4e9e05287c5f2804578d4570640cc60a73cc37527f1acae99d3c82663a612167dbd29c1b2eb3751e31315eec37e776285749f47dae2d51b9c5bb151bac40

Score

10^/10

qakbot banker cryptone packer stealer trojan

Malware Config

Targets

- Target
  
  SecuriteInfo.com.Win32.Kryptik.HDBX.579
- Size
  
  1.8MB
- MD5
  
  e139969d784f0fa5a453c1c61f567461
- SHA1
  
  4b78b16a38c6eb1a743efe2094026b5aadf6e737
- SHA256
  
  cb6482a720030ffef0799c6743bb134a71962531a05f38c5706449985ca37d52
- SHA512
  
  0b9e4e9e05287c5f2804578d4570640cc60a73cc37527f1acae99d3c82663a612167dbd29c1b2eb3751e31315eec37e776285749f47dae2d51b9c5bb151bac40
Score

10^/10

qakbot banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Remote System Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

qakbotbankerstealertrojan

behavioral2