Navigating QakBot samples with grap
Excerpt
This post demonstrates how to use grap to quickly find and analyse documented features (based on public reports) in published QakBot samples:
All features and IOC described here are already published (see References) Samples are from Malpedia: win.qakbot
We explain both the grap standalone tool and the IDA plugin
This is a tutorial demonstrating grap’s features with increasing complexity.
References
[1] - Reversing Qakbot - https://hatching.io/blog/reversing-qakbot/
[2] - Deep Analysis of QBot Banking Trojan - https://n1ght-w0lf.github.io/malware%20anal…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by quosecgmbh.github.io on quosecgmbh.github.io.
On the same topics
- Lorem Ipsum Revisited: ClickFix Pivot & Rapid BrigantineBlueVoyant · Added 25 Oct
- From PostCSS Masquerading to Windows RATJFrog · Published 22 Jun
- Showboat Malware: Emerging Threats Targeting Telecom ProvidersLumen Black Lotus Labs · Added 25 Oct
- International law enforcement initiate hunt on malware group SocGholishDutch National Police · Published 18 Jun