Triage | Malware sandboxing report by Hatching Triage

Sharing

General

Target

b6e629128e9316820cfd5bdfe4d621d5a7435717879d554567df31352fb8558e.dll
Size

157KB
Sample

221028-qrvwbagbfk
MD5

258f4d970b7185375d31dc46a939a6ff
SHA1

bf33205fb9aa14345384245823ee11d84b538cfd
SHA256

b6e629128e9316820cfd5bdfe4d621d5a7435717879d554567df31352fb8558e
SHA512

c5b9a87fc1d6a21ff22e4d1e4dfd9174545e05f7e37d9a0c63e801a9f813f3b732c04b1b76d66da72e4cebaa47efcf697d0025a6e75284c582c5589a026cb9df
SSDEEP

3072:O040Uu4Yjm8j7qHllvH2AoJgSXRETBfNirskO/yaY/fT:p4YjTjGHnzoJhXRETBlirsP/g/

Score

10^/10

qakbot banker stealer trojan

Malware Config

Targets

- Target
  
  b6e629128e9316820cfd5bdfe4d621d5a7435717879d554567df31352fb8558e.dll
- Size
  
  157KB
- MD5
  
  258f4d970b7185375d31dc46a939a6ff
- SHA1
  
  bf33205fb9aa14345384245823ee11d84b538cfd
- SHA256
  
  b6e629128e9316820cfd5bdfe4d621d5a7435717879d554567df31352fb8558e
- SHA512
  
  c5b9a87fc1d6a21ff22e4d1e4dfd9174545e05f7e37d9a0c63e801a9f813f3b732c04b1b76d66da72e4cebaa47efcf697d0025a6e75284c582c5589a026cb9df
- SSDEEP
  
  3072:O040Uu4Yjm8j7qHllvH2AoJgSXRETBfNirskO/yaY/fT:p4YjTjGHnzoJhXRETBlirsP/g/
Score

10^/10

qakbot banker stealer trojan
- Qakbot/Qbot
  Qbot or Qakbot is a sophisticated worm with banking capabilities.
  trojan banker stealer qakbot
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

qakbotbankerstealertrojan

behavioral2