Resubmissions

22-03-2022 23:09

220322-25f5vsgbal 10

22-03-2022 23:06

220322-23jszagagl 10

22-03-2022 22:56

220322-2wzkvabec4 10

21-03-2022 22:58

220321-2yaphaacdj 10

21-03-2022 22:51

220321-2s588aaccp 10

21-03-2022 22:45

220321-2pm88sdhe9 10

21-03-2022 22:34

220321-2hctxsacbn 10

21-03-2022 22:26

220321-2cmf6sdhd3 10

General

  • Target

    quakbot.7z

  • Size

    427KB

  • Sample

    220322-23jszagagl

  • MD5

    c0b75294a98827d61f418d68603b6d3d

  • SHA1

    99916743849daaff39ff1ea8cc4c3f7feb9a7ab1

  • SHA256

    a0cf28c2aef66b9dc0538bdba509b2ba46b7abc3287f9e1dfa56fc55c210f15d

  • SHA512

    faae41fcab08254f46cd93aa65fe94d4876a380b2928d1b9b76583a956139d7718d7fc192b99de58c5e2438c3550406fc368d75194fc5dff0d1c3cd80bddb22c

Malware Config

Extracted

Family

qakbot

Attributes
  • salt

    u

Targets

    • Target

      samples/c59d033fa3a58112f7520113699c74552c4d12bb10783fa880359ec94affe2a1

    • Size

      2.1MB

    • MD5

      adfa9e13af7bff7b9304de834dc620e6

    • SHA1

      1eceee464aefad0708f1e5ddcd0550b25da32fe0

    • SHA256

      c59d033fa3a58112f7520113699c74552c4d12bb10783fa880359ec94affe2a1

    • SHA512

      c3e459751cd7d36c6fe6934d03144536a3d0f6f85318bf14f798a6ea9d5bee2adf68cb20d2c9ecf861a9bd96b5fd75750fcf283f8fe17a878f19ab7706692c66

    • Qakbot/Qbot

      Qbot or Qakbot is a sophisticated worm with banking capabilities.

    • Detects variants of QakBot payload

MITRE ATT&CK Matrix

Tasks