2021-02-24 - QAKBOT (QBOT) INFECTION WITH SPAMBOT TRAFFIC

NOTICE:

• The zip archives on this page have been updated, and they now use the new password scheme.  For the new password, see the "about" page of this website.

ASSOCIATED FILES:

• 2021-02-24-IOCs-from-Qakbot-infection-with-spambot-traffic.txt.zip   1.6 kB   (1,618 bytes)
• 2021-02-24-Qakbot-infection-with-spambot-traffic.pcap.zip   17.8 MB   (17,780,271 bytes)
• 2021-02-24-malware-from-Qakbot-infection.zip   214 kB   (214,491 bytes)
• 2021-02-24-Qakbot-malspam-3-examples-from-the-pcap.zip   98 kB   (98,416 bytes)

 

IMAGES

Shown above:  A Windows PC getting infected with Qakbot.

 

Shown above:  Qakbot infection filtered in Wireshark (part 1 of 2).

 

Shown above:  Qakbot infection filtered in Wireshark (part 2 of 2).

 

Shown above:  Filtering in Wireshark to find email sent using unencrypted SMTP.

 

Click here to return to the main page.