qakbot | bf6ab55e02880cb4aff0dff16a2d608b56be4cd88b5a2c425ef3934f4cc091c3 | Triage

Sharing

General

Target

SecuriteInfo.com.Win32.Kryptik.HDBX.3579
Size

1.8MB
Sample

201109-dc2ffl9dcn
MD5

2ee8b7769503088a310b710416b4033a
SHA1

a8d0ef6771b1db73e840596c9add5b9bdc26d602
SHA256

bf6ab55e02880cb4aff0dff16a2d608b56be4cd88b5a2c425ef3934f4cc091c3
SHA512

9f8752ff0d5ed07aeaa0f5186ef8089db7dc429f83895817065cf842dec63d52b691ed0b21797a70e1fc2e1482da44674ce0a775632d149a4d211b00ad10993c

Score

10^/10

qakbot banker cryptone packer stealer trojan

Malware Config

Targets

- Target
  
  SecuriteInfo.com.Win32.Kryptik.HDBX.3579
- Size
  
  1.8MB
- MD5
  
  2ee8b7769503088a310b710416b4033a
- SHA1
  
  a8d0ef6771b1db73e840596c9add5b9bdc26d602
- SHA256
  
  bf6ab55e02880cb4aff0dff16a2d608b56be4cd88b5a2c425ef3934f4cc091c3
- SHA512
  
  9f8752ff0d5ed07aeaa0f5186ef8089db7dc429f83895817065cf842dec63d52b691ed0b21797a70e1fc2e1482da44674ce0a775632d149a4d211b00ad10993c
Score

10^/10

qakbot banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Remote System Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

qakbotbankerstealertrojan

behavioral2