quakbot

An old enemy – Diving into QBot part 2

Malware Analysis / April 26, 2020

Intro I hope everyone is healthy :-). I finally managed to find some time to continue my analysis of QBot. If you did not read my previous articles, I’ve already covered the packer[1] as well as the string decryption algorithm[2]. I’ve linked them both here. In this blog post I will cover the process execution […]

An old enemy – Diving into QBot part 2 Read More »

An old enemy – Diving into QBot part 1

Malware Analysis / March 30, 2020

While checking out the Triage Sandbox[1] I stumbled across upon QBot which I’ve seen already plenty of times at work at GData Cyberdefense AG[2]. This time I wanted to take a closer look at the sample myself.The first part of this blog article dives deep into how the packer works. Quick summary The packer used

An old enemy – Diving into QBot part 1 Read More »