qakbot | b6e629128e9316820cfd5bdfe4d621d5a7435717879d554567df31352fb8558e | Triage

Submit
Reports

Overview

overview

Static

static

b6e629128e...8e.dll

windows7-x64

b6e629128e...8e.dll

windows10-2004-x64

3

Sharing

General

Target

b6e629128e9316820cfd5bdfe4d621d5a7435717879d554567df31352fb8558e.dll
Size

157KB
Sample

221028-qrvwbagbfk
MD5

258f4d970b7185375d31dc46a939a6ff
SHA1

bf33205fb9aa14345384245823ee11d84b538cfd
SHA256

b6e629128e9316820cfd5bdfe4d621d5a7435717879d554567df31352fb8558e
SHA512

c5b9a87fc1d6a21ff22e4d1e4dfd9174545e05f7e37d9a0c63e801a9f813f3b732c04b1b76d66da72e4cebaa47efcf697d0025a6e75284c582c5589a026cb9df
SSDEEP

3072:O040Uu4Yjm8j7qHllvH2AoJgSXRETBfNirskO/yaY/fT:p4YjTjGHnzoJhXRETBlirsP/g/

Score

10^/10

qakbot banker stealer trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

b6e629128e9316820cfd5bdfe4d621d5a7435717879d554567df31352fb8558e.dll

Resource

win7-20220901-en

qakbot banker stealer trojan

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

b6e629128e9316820cfd5bdfe4d621d5a7435717879d554567df31352fb8558e.dll

Resource

win10v2004-20220812-en

windows10-2004-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  
  b6e629128e9316820cfd5bdfe4d621d5a7435717879d554567df31352fb8558e.dll
- Size
  
  157KB
- MD5
  
  258f4d970b7185375d31dc46a939a6ff
- SHA1
  
  bf33205fb9aa14345384245823ee11d84b538cfd
- SHA256
  
  b6e629128e9316820cfd5bdfe4d621d5a7435717879d554567df31352fb8558e
- SHA512
  
  c5b9a87fc1d6a21ff22e4d1e4dfd9174545e05f7e37d9a0c63e801a9f813f3b732c04b1b76d66da72e4cebaa47efcf697d0025a6e75284c582c5589a026cb9df
- SSDEEP
  
  3072:O040Uu4Yjm8j7qHllvH2AoJgSXRETBfNirskO/yaY/fT:p4YjTjGHnzoJhXRETBlirsP/g/
Score

10^/10

qakbot banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

qakbotbankerstealertrojan

behavioral2

© 2018-2024

Terms | Privacy