Extracted

• • Target

    gallery#6425.iso

  • Size

    1024KB

  • MD5

    774a33fad29713030cfdf53c80a6f71c

  • SHA1

    091f37d50bec51e52c66f0c46dfd2ee269dd0e56

  • SHA256

    7390a6815342f026732d649bfe8ebee03e7a2fd29558d16ea3d8b72424663394

  • SHA512

    acd0f3655b0b3776b76f9c219687d2fb0de304c548a3fa09b12bb92f13a49c5f35ddc5f983625434859cb44429c221638ae6ca16ad51c525a17080863810193d

  • SSDEEP

    12288:OwBOlOtHHyD1bYkNyqieL1vc1PdFjpmw5qS6xnGWvE/NIg5UT+QD1lNMAxH:OwzHHyD1bYkNyx81IFnqnvE/5w9MW

  Score

  10^/10

  qakbotbb1664358901bankerstealertrojan

  • Qakbot/Qbot

    Qbot or Qakbot is a sophisticated worm with banking capabilities.

    trojanbankerstealerqakbot

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2