2020-08-03 - QAKBOT (QBOT) SPX147

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

ASSOCIATED FILES:

• 2020-08-03-Qakbot-spx147-IOCs.txt.zip   3.1 kB (3,099 bytes)
• 2020-08-03-Qakbot-spx147-infection-traffic-3-pcaps.zip   13.7 MB (13,671,215 bytes)
• 2020-08-03-Qakbot-spx147-malspam-20-examples.zip   48.3 kB (48,306 bytes)
• 2020-08-03-Qakbot-spx147-malware-and-artifacts.zip   3.3 MB (3,326,052 bytes)

 

IMAGES

Shown above:  Screenshot from malspam pushing Qakbot on Monday, 2020-08-03.

 

Shown above:  Traffic from an infection filtered on Wireshark (1 of 3).

 

Shown above:  Traffic from an infection filtered on Wireshark (2 of 3).

 

Shown above:  Traffic from an infection filtered on Wireshark (3 of 3).

 

Click here to return to the main page.