netfilter | qakbot_shellcode[.]exe | Triage

Sharing

General

Target

qakbot_shellcode.exe
Size

16.1MB
MD5

ebdb50444f90c91a1cb0c7a48db4d094
SHA1

e096bee17dd60b2f44dd543a91334f20f17624b3
SHA256

d516989117d9960733d36875e087db596a005ab621a4147233a8892e43a0bc49
SHA512

2801fc919c82e343268fbdec0d425b2f7c9c224f59ef58118c914d8216d8577cff36894f9c200537a21323e10c6a770eff30e29906c09e01249ff85a12891aa9
SSDEEP

98304:7DeNTga28q4HuMBsIGKBn1gB16px3EDYsz:H3MH8mneBgx0DYsz

Score

10^/10

netfilter snakekeylogger

Malware Config

Signatures

NetFilter Dropper 1 IoCs

Processes:

resource	yara_rule
sample	netfilter_dropper

Netfilter family
netfilter

Snake Keylogger payload 1 IoCs

Processes:

resource	yara_rule
sample	family_snakekeylogger

Snakekeylogger family
snakekeylogger

Files

qakbot_shellcode.exe