Overview

overview

10

Static

static

3

VV.lnk

windows7-x64

10

VV.lnk

windows10-2004-x64

10

transitori...os.cmd

windows7-x64

1

transitori...os.cmd

windows10-2004-x64

1

transitori...ed.dll

windows7-x64

10

transitori...ed.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    QakBot-29.10.2022.zip

  • Size

    352KB

  • MD5

    27a3a1302720cc6d2ef36a1243caf8ee

  • SHA1

    ef2db9ce473647e736ece3ebe6ccd289f68dc0d6

  • SHA256

    e7c797dfae57a694228afadcb50c8364dad97ff988528ff88f5042c4ccebfd76

  • SHA512

    aa777139c2f09343987b95b33878cbc88a512a7f734a8f3397075d9bffa3e47aa84ea3dfd7e5330b7fc5aad7a87858ee151d41a9b6b156381df46ed6161f54d1

  • SSDEEP

    6144:uP9ZT/oyBUwU4W1F8LxQz5ZnZ1P8pd65lGjYjYC8qi5icBUggkRLeTdIF:EZbbD8omz5ZnZVVGjYjEKhgxV6Q

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • QakBot-29.10.2022.zip
    .zip

    Password: infected

  • VV3872.iso
    .iso
  • VV.lnk
    .lnk
  • transitoriness/cottontail.txt
  • transitoriness/staccatos.cmd
    .cmd .vbs
  • transitoriness/undried.dat
    .dll regsvr32 windows:6 windows x86 arch:x86

    a207c1d2fbc58a15cbfda19bb6a789f0


    Headers

    Imports

    Exports

    Sections