Extracted

• • Target

    SH39.img

  • Size

    996KB

  • MD5

    a1267d1e162b69201b6375d69254742b

  • SHA1

    7d7cd9711cfd2e0a6c23c1d4bd2151c8db05122f

  • SHA256

    997878e5c8e0d3d1b9f8c67319fea898443e145a81cdd9b40ca728d72ead963a

  • SHA512

    1f3b3e2f3822a1b2a71d2edb11e450fccd813078a1dd660b79951fc36214292d592578f67b05dcfb89283f30bec7b9b216537e7492569c5da1ebbc8d19412077

  • SSDEEP

    24576:dYfx4Yk7A4DUESx+9MuI4vhL3tXwwvwJwRwJZwSw5wqwfHH8H2HHLwu2Hk:MuY0ArH3T4vJ3tXwwvwJwRwJZwSw5wqj

  Score

  3^/10
  behavioral1behavioral2

• • Target

    SK.vbs

  • Size

    9KB

  • MD5

    6d6e8f92cab677e7325e5fc9fa335e1f

  • SHA1

    e24ec05cbfcaeb69da9e37b65553366542968e6a

  • SHA256

    f6ed694187e2621312926ae2a4e9fe6f3b258f139bc180e34116d695948a2c5b

  • SHA512

    6909064a8a6b567c68eaea54533d00c4e934709f5749288fc88f3421b86947aae2b64d33319fbcc1915c5f5c7ce5fd1d50ada485577fd19d46e4a37ff0492c61

  • SSDEEP

    192:9eSjzZaUgrcl/E4rowaD/OCMhiEe1C7p11G0vdzgWF0fkbsgTbpQa:Q41ajrcpE4rocCMhidGpPGmX0jWbX

  Score

  10^/10

  qakbotbb061668610672bankerstealertrojan

  • Qakbot/Qbot

    Qbot or Qakbot is a sophisticated worm with banking capabilities.

    trojanbankerstealerqakbot

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral3behavioral4

• • Target

    cushioned/horticulture.tmp

  • Size

    528KB

  • MD5

    0a9ca2f8215f96e32e0c33da9532d3f1

  • SHA1

    7f2b1d92f0a3349bbc7cbf1f072c79cf76cad89c

  • SHA256

    9e362baa9b19ddd6096a028315f8337e401584e00d1321ae742d51d0880c6450

  • SHA512

    e168619f563c9f7cbb42f910089ae19258e37e08d5cf8dfb87fba18bd2d930c46b814a025658f1554fef3732c384ffc120cabf70e44be99115ccbf9273082069

  • SSDEEP

    12288:Sx4YGJ7FVsr0DUESx8f9TQGWCIQ1HvhL3iL/wXLK:Sx4Yk7A4DUESx+9MuI4vhL3tX

  Score

  10^/10

  qakbotbb061668610672bankerstealertrojan

  • Qakbot/Qbot

    Qbot or Qakbot is a sophisticated worm with banking capabilities.

    trojanbankerstealerqakbot
  behavioral5behavioral6