1. Sample overview
Hash: af6a9b7e7aefeb903c76417ed2b8399b73657440ad5f8b48a25cfe5e97ff868f
In this new sample, threat actor has updated Qakbot’s codebase to support 64-bit versions of Windows.
Archive for April, 2024
[QuickNote] Qakbot 5.0 – Decrypt strings and configuration
Posted: April 24, 2024 in My Tutorials, [QuickNote] Qakbot 5.0 - Decrypt strings and configurationTags: cybersecurity, encryption, IDA, Idapython, Malware Analysis, Qakbot, Qbot, ReverseEngineering, Security, technology
2
[QuickNote] Phishing email distributes WarZone RAT via DBatLoader
Posted: April 9, 2024 in My Tutorials, [QuickNote] Phishing email distributes WarZone RAT via DBatLoaderTags: AveMariaRAT, DBatLoader, malware, Malware Analysis, ModiLoader, Warzone RAT
I. Execution Flow Summary:
Below is an illustrated and summarized way of how WarZone RAT sample infects the victim system via DBatLoader:
0day in {REA_TEAM} 