DllRegisterServer
Hkv70Kdh
IPlj2HAa
OIP225V1
OftHwD9701
Overview
overview
10Static
static
5f21561d-c...7b.zip
windows7-x64
15f21561d-c...7b.zip
windows10-1703-x64
15f21561d-c...7b.zip
windows10-2004-x64
1SCAN_DT6281.html
windows7-x64
8SCAN_DT6281.html
windows10-1703-x64
10SCAN_DT6281.html
windows10-2004-x64
8SCAN_DT6281.iso
windows7-x64
3SCAN_DT6281.iso
windows10-1703-x64
6SCAN_DT6281.iso
windows10-2004-x64
6IncomingPa...es.cmd
windows7-x64
10IncomingPa...es.cmd
windows10-1703-x64
10IncomingPa...es.cmd
windows10-2004-x64
10IncomingPa...on.dll
windows7-x64
10IncomingPa...on.dll
windows10-1703-x64
10IncomingPa...on.dll
windows10-2004-x64
10SCAN_DT6281.lnk
windows7-x64
10SCAN_DT6281.lnk
windows10-1703-x64
10SCAN_DT6281.lnk
windows10-2004-x64
10SCAN_DT628...es.cmd
windows7-x64
10SCAN_DT628...es.cmd
windows10-1703-x64
10SCAN_DT628...es.cmd
windows10-2004-x64
10SCAN_DT628...on.dll
windows7-x64
10SCAN_DT628...on.dll
windows10-1703-x64
10SCAN_DT628...on.dll
windows10-2004-x64
10SCAN_DT628...81.lnk
windows7-x64
10SCAN_DT628...81.lnk
windows10-1703-x64
10SCAN_DT628...81.lnk
windows10-2004-x64
10Static task
static1
Behavioral task
behavioral1
Sample
5f21561d-cd4e-4e55-8622-eeee37af1c7b.zip
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5f21561d-cd4e-4e55-8622-eeee37af1c7b.zip
Resource
win10-20220812-en
Behavioral task
behavioral3
Sample
5f21561d-cd4e-4e55-8622-eeee37af1c7b.zip
Resource
win10v2004-20220901-en
Behavioral task
behavioral4
Sample
SCAN_DT6281.html
Resource
win7-20220812-en
Behavioral task
behavioral5
Sample
SCAN_DT6281.html
Resource
win10-20220812-en
Behavioral task
behavioral6
Sample
SCAN_DT6281.html
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
SCAN_DT6281.iso
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
SCAN_DT6281.iso
Resource
win10-20220901-en
Behavioral task
behavioral9
Sample
SCAN_DT6281.iso
Resource
win10v2004-20221111-en
Behavioral task
behavioral10
Sample
IncomingPay/Issues.cmd
Resource
win7-20221111-en
Behavioral task
behavioral11
Sample
IncomingPay/Issues.cmd
Resource
win10-20220812-en
Behavioral task
behavioral12
Sample
IncomingPay/Issues.cmd
Resource
win10v2004-20221111-en
Behavioral task
behavioral13
Sample
IncomingPay/NewInformation.dll
Resource
win7-20221111-en
Behavioral task
behavioral14
Sample
IncomingPay/NewInformation.dll
Resource
win10-20220812-en
Behavioral task
behavioral15
Sample
IncomingPay/NewInformation.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral16
Sample
SCAN_DT6281.lnk
Resource
win7-20220812-en
Behavioral task
behavioral17
Sample
SCAN_DT6281.lnk
Resource
win10-20220901-en
Behavioral task
behavioral18
Sample
SCAN_DT6281.lnk
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
SCAN_DT6281_img_contents/IncomingPay/Issues.cmd
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
SCAN_DT6281_img_contents/IncomingPay/Issues.cmd
Resource
win10-20220812-en
Behavioral task
behavioral21
Sample
SCAN_DT6281_img_contents/IncomingPay/Issues.cmd
Resource
win10v2004-20221111-en
Behavioral task
behavioral22
Sample
SCAN_DT6281_img_contents/IncomingPay/NewInformation.dll
Resource
win7-20221111-en
Behavioral task
behavioral23
Sample
SCAN_DT6281_img_contents/IncomingPay/NewInformation.dll
Resource
win10-20220901-en
Behavioral task
behavioral24
Sample
SCAN_DT6281_img_contents/IncomingPay/NewInformation.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
SCAN_DT6281_img_contents/SCAN_DT6281.lnk
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
SCAN_DT6281_img_contents/SCAN_DT6281.lnk
Resource
win10-20220812-en
Target
2022-12-09-azd-Qakbot-malware-and-artifacts.zip
Size
1.9MB
MD5
b515287c07b0a07e1d59b5da9e7e0ea6
SHA1
7c7b72ea05c2275d0fd0558a0d88e88550bc5e07
SHA256
6e228ee890c028a15a9cf32a3166d8bed09c9959741a8083225c50b7de3038d0
SHA512
c78bc84c5ee7e96334e1a67c4849c151eff235674e68428f14536009902bf698bea3bfb43dffa9f3d91a7e7cc6d806f886229dfc7e3642cdfed944b1f75647fc
SSDEEP
49152:BW2DlZIT1HespmEBL/KPDMW7aY8h65rQuPcA08g8MN:BWabIT1+KmEZ6DExcJF0R8u
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateFileA
WriteFile
CloseHandle
GetLastError
HeapCreate
CreateFiber
SwitchToFiber
CreateThread
SuspendThread
ResumeThread
FindFirstFileA
FindNextFileA
FindClose
GetModuleHandleA
GetFileInformationByHandle
DeleteCriticalSection
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
HeapAlloc
HeapFree
GetModuleHandleW
GetProcAddress
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
FreeLibrary
LoadLibraryExW
LCMapStringW
GetStdHandle
GetFileType
GetStartupInfoW
MultiByteToWideChar
WideCharToMultiByte
SetLastError
GetCurrentThreadId
GetACP
GetStringTypeW
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
GetCPInfo
IsValidCodePage
GetOEMCP
ExitProcess
GetModuleHandleExW
SetFilePointerEx
CreateFileW
WriteConsoleW
DecodePointer
RaiseException
HeapSize
HeapReAlloc
QueryPerformanceCounter
GetCurrentProcessId
InitializeSListHead
RtlUnwind
InterlockedFlushSList
GetModuleFileNameA
FindFirstFileExA
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
DllRegisterServer
Hkv70Kdh
IPlj2HAa
OIP225V1
OftHwD9701
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
CreateFileA
WriteFile
CloseHandle
GetLastError
HeapCreate
CreateFiber
SwitchToFiber
CreateThread
SuspendThread
ResumeThread
FindFirstFileA
FindNextFileA
FindClose
GetModuleHandleA
GetFileInformationByHandle
DeleteCriticalSection
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
HeapAlloc
HeapFree
GetModuleHandleW
GetProcAddress
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
FreeLibrary
LoadLibraryExW
LCMapStringW
GetStdHandle
GetFileType
GetStartupInfoW
MultiByteToWideChar
WideCharToMultiByte
SetLastError
GetCurrentThreadId
GetACP
GetStringTypeW
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
GetCPInfo
IsValidCodePage
GetOEMCP
ExitProcess
GetModuleHandleExW
SetFilePointerEx
CreateFileW
WriteConsoleW
DecodePointer
RaiseException
HeapSize
HeapReAlloc
QueryPerformanceCounter
GetCurrentProcessId
InitializeSListHead
RtlUnwind
InterlockedFlushSList
GetModuleFileNameA
FindFirstFileExA
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
DllRegisterServer
Hkv70Kdh
IPlj2HAa
OIP225V1
OftHwD9701
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ