2020-04-20 - QAKBOT (QBOT) SPX100 - THE "/VARY/" WAVE

ASSOCIATED FILES:

• 2020-04-20-Qakbot-spx100-malspam-24-examples.zip   70.9 kB (70,864 bytes)

• 2020-04-20-Qakbot-spx100-malspam-204543-UTC.eml   (2,264 bytes)
• 2020-04-20-Qakbot-spx100-malspam-204548-UTC.eml   (2,054 bytes)
• 2020-04-20-Qakbot-spx100-malspam-204549-UTC.eml   (3,546 bytes)
• 2020-04-20-Qakbot-spx100-malspam-205339a-UTC.eml   (11,059 bytes)
• 2020-04-20-Qakbot-spx100-malspam-205339b-UTC.eml   (1,120 bytes)
• 2020-04-20-Qakbot-spx100-malspam-205346-UTC.eml   (8,914 bytes)
• 2020-04-20-Qakbot-spx100-malspam-210036-UTC.eml   (1,375 bytes)
• 2020-04-20-Qakbot-spx100-malspam-211325-UTC.eml   (2,010 bytes)
• 2020-04-20-Qakbot-spx100-malspam-211331-UTC.eml   (53,188 bytes)
• 2020-04-20-Qakbot-spx100-malspam-211337a-UTC.eml   (3,793 bytes)
• 2020-04-20-Qakbot-spx100-malspam-211337b-UTC.eml   (2,502 bytes)
• 2020-04-20-Qakbot-spx100-malspam-211338-UTC.eml   (8,820 bytes)
• 2020-04-20-Qakbot-spx100-malspam-211452a-UTC.eml   (5,984 bytes)
• 2020-04-20-Qakbot-spx100-malspam-211452b-UTC.eml   (5,984 bytes)
• 2020-04-20-Qakbot-spx100-malspam-212633-UTC.eml   (63,515 bytes)
• 2020-04-20-Qakbot-spx100-malspam-212639a-UTC.eml   (31,234 bytes)
• 2020-04-20-Qakbot-spx100-malspam-212639b-UTC.eml   (13,400 bytes)
• 2020-04-20-Qakbot-spx100-malspam-212641a-UTC.eml   (8,414 bytes)
• 2020-04-20-Qakbot-spx100-malspam-212641b-UTC.eml   (8,414 bytes)
• 2020-04-20-Qakbot-spx100-malspam-214058-UTC.eml   (31,538 bytes)
• 2020-04-20-Qakbot-spx100-malspam-214437-UTC.eml   (6,805 bytes)
• 2020-04-20-Qakbot-spx100-malspam-215703-UTC.eml   (6,898 bytes)
• 2020-04-20-Qakbot-spx100-malspam-215710-UTC.eml   (2,745 bytes)
• 2020-04-20-Qakbot-spx100-malspam-215713-UTC.eml   (4,850 bytes)

• 2020-04-20-Qakbot-spx100-infection-traffic.pcap.zip   18.3 MB (18,262,519 bytes)

• 2020-04-20-Qakbot-spx100-infection-traffic.pcap   (23,367,901 bytes)

• 2020-04-20-Qakbot-spx100-malware-and-artifacts.zip   2.1 MB (2,117,918 bytes)

• 12379.zip   (116,674 bytes)
• 324437.zip   (114,255 bytes)
• 0292708.zip   (16,956 bytes)
• 7908537.zip   (119,741 bytes)
• 835554765.zip   (113,123 bytes)
• 2020-04-20-Qakbot-EXE-spx100-example-01.bin   (2,302,976 bytes)
• 2020-04-20-Qakbot-EXE-spx100-example-02.bin   (2,302,976 bytes)
• 2020-04-20-Qakbot-EXE-spx100-example-03.bin   (2,302,976 bytes)
• 2020-04-20-Qakbot-EXE-spx100-example-04.bin   (2,302,976 bytes)
• 2020-04-20-Qakbot-EXE-spx100-example-05.bin   (2,302,976 bytes)
• 2020-04-20-Qakbot-spx100-registry-update-for-persistence.txt   (822 bytes)
• 2020-04-20-Qakbot-spx100-scheduled-task-for-persistence.txt   (4,010 bytes)

NOTES:

• My paste of info related to today's Qakbot (spx100 starting 2020-04-20): https://pastebin.com/qSYjLhPq
• All zip archives on this site are password-protected with the standard password.  If you don't know it, see the "about" page of this website.

 

Click here to return to the main page.