Automating Qakbot decode at scale :: Velociraptor - Digging deeper!
Tags
cmtmf-attack-pattern: Process Injection
attack-pattern: Data Credentials - T1589.001 Ip Addresses - T1590.005 Javascript - T1059.007 Malware - T1587.001 Malware - T1588.001 Process Injection - T1631 Tool - T1588.002 Process Injection - T1055
Show in Graph
Common Information
Type Value
UUID d2192389-5601-4be1-8788-e8c22ef3bc89
Fingerprint 245949a039bc0f9c
Analysis status DONE
Considered CTI value 0
Text language
Published April 5, 2023, midnight
Added to db Aug. 31, 2024, 2:04 a.m.
Last updated Oct. 16, 2024, 2:02 a.m.
Headline Automating Qakbot decode at scale
Title Automating Qakbot decode at scale :: Velociraptor - Digging deeper!
Detected Hints/Tags/Attributes 42/2/1
Source URLs
Redirection Url
Details Source https://docs.velociraptor.app/blog/2023/2023-04-05-qakbot/
URL Provider
Details Provider Source level domain
Details velociraptor.app docs.velociraptor.app
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 104 ✔ Velociraptor Blog https://docs.velociraptor.app/blog/index.xml 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details File 51 
wermgr.exe