Behavioral task
behavioral1
Sample
baa952bfeae28062d42e78bed942525b68090b4b43ac2ec8a619d0580bd1acca.xlsm
Resource
win7v20210410
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
baa952bfeae28062d42e78bed942525b68090b4b43ac2ec8a619d0580bd1acca.xlsm
Resource
win10v20210410
0 signatures
0 seconds
General
-
Target
qbot.zip
-
Size
323KB
-
MD5
af2e73d50483dd49b73069507117b798
-
SHA1
e0d1ddbb33217aa9d8217a015b86c1bd7f368dbb
-
SHA256
5f1a47f7e929a6563f9b4d18dbefbab17942d63c9738baa0f1c4e9a25152fbb3
-
SHA512
77cd1510806ad8615c378c719fba536ecffe86d40fd8b9d950b1637c674ea1f301e648b6a9ee77a3d6b3da10096af1742362c58629c27e916993655fe25d6db5
Malware Config
Signatures
-
Processes:
resource yara_rule static1/unpack001/baa952bfeae28062d42e78bed942525b68090b4b43ac2ec8a619d0580bd1acca.xlsm office_xlm_macros static1/unpack001/baa952bfeae28062d42e78bed942525b68090b4b43ac2ec8a619d0580bd1acca.xlsm office_macros
Files
-
qbot.zip.zip
Password: infected
-
baa952bfeae28062d42e78bed942525b68090b4b43ac2ec8a619d0580bd1acca.xlsm.xlsm office2007
ЭтаКнига
Лист1
Module1