General

  • Target

    362978ed1c1eec5ff19b744601e082a2.bin

  • Size

    99KB

  • Sample

    240426-bhny3sgg44

  • MD5

    268eef2cf46ce87135c90c6948e3d673

  • SHA1

    4bc1d6a108250f52d819b70992493a3a80df381a

  • SHA256

    1aa8e55ceec841c7ca088da6fc3e018ebc265bfd3ce85cae0339106143800186

  • SHA512

    1cdfbfcd1eecb0ec62456923369b2353aafacf14fb9057dacad7d4fcded828705742fff7b7fe7524397e9287ef90182b55e56b049943a3236d0a2cb3039215e1

  • SSDEEP

    1536:ErsYCV7bwLn7iWpWUy1AUDs/RDIrfSUeJSat1v+zar1VYrOBZCiLW6wowdc:8s7bwLnWVUVJa5eJSaHvj3DzW8

Malware Config

Targets

    • Target

      af6a9b7e7aefeb903c76417ed2b8399b73657440ad5f8b48a25cfe5e97ff868f.exe

    • Size

      169KB

    • MD5

      362978ed1c1eec5ff19b744601e082a2

    • SHA1

      9c9e834e1c38a50fc6cb3ceef4963a4a0026d5af

    • SHA256

      af6a9b7e7aefeb903c76417ed2b8399b73657440ad5f8b48a25cfe5e97ff868f

    • SHA512

      45fe028cfa92a88e86d5a354b84227b20f41254463a0b43328fc1a5e914e9e34bb42ef7d10e55972a24cf0a8c7b5b30045186bca5e9e0bc94fecb0e301b2e44e

    • SSDEEP

      3072:QMpYuPV2KxPQSDYGQHKLDg5wF1L0D9goAP9TyjCyB5fS:QfuYMPQSDmHaDHF14DfA1yCyBlS

    • Detect Qakbot Payload

    • Qakbot/Qbot

      Qbot or Qakbot is a sophisticated worm with banking capabilities.

MITRE ATT&CK Matrix

Tasks