qakbot | 98ac4fde26f6f87ed27f7c1b1f3ce88e86ea0fd2303c13b90ff77e77c70100be | Triage

Sharing

General

Target

SecuriteInfo.com.Trojan.Inject3.39575.13300.25948
Size

2.0MB
Sample

201109-rvcmkjrv6s
MD5

ef61071df06d356311801907c2d135c2
SHA1

1d2271e1d3800c6489ad48195f9506f4cec1ab09
SHA256

98ac4fde26f6f87ed27f7c1b1f3ce88e86ea0fd2303c13b90ff77e77c70100be
SHA512

2a57c2418bda827b98597c563a87b37006ce7a126855be54cd14e8cec88b823fb42aa9b5750257a8f229772ea4b76df31581709c19dd8cba8c23a0b0962cd068

Score

10^/10

qakbot banker cryptone packer stealer trojan

Malware Config

Targets

- Target
  
  SecuriteInfo.com.Trojan.Inject3.39575.13300.25948
- Size
  
  2.0MB
- MD5
  
  ef61071df06d356311801907c2d135c2
- SHA1
  
  1d2271e1d3800c6489ad48195f9506f4cec1ab09
- SHA256
  
  98ac4fde26f6f87ed27f7c1b1f3ce88e86ea0fd2303c13b90ff77e77c70100be
- SHA512
  
  2a57c2418bda827b98597c563a87b37006ce7a126855be54cd14e8cec88b823fb42aa9b5750257a8f229772ea4b76df31581709c19dd8cba8c23a0b0962cd068
Score

10^/10

qakbot banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Peripheral Device Discovery

System Information Discovery

Remote System Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

qakbotbankerstealertrojan

behavioral2