Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Threat Actors
Malware Families
Excerpt
Qbot: A Deep Dive into the Banking Trojan what is Qakbot ? Qbot (Pinkslipbot) is a Banking Trojan first observed in 2007, It is typically delivered through phishing techniques asking to open malicious attachments or to lure victims onto fake websites that use exploits to execute Qbot onto a victim’s machine, Qakbot steals sensitive data and attempts to self-propagate to other systems on the network. Qakbot also provides remote code execution (RCE) capabilities, allowing…
Read the original report →Diamond Model
Adversary(1)
Infrastructure(5)
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →7 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| URL | http://pickap.io/wp-content/uploads/2020/04/evolving/888888.png | High | Score 58/100 | First seen |
| URL | http://kslanrung.com/evolving/888888.png | High | Score 58/100 | First seen |
| SHA256 | f5ff6dbf5206cc2db098b41f5af14303f6dc43e36c5ec02604a50d5cfecf4790 | Medium | Score 53/100 | First seen |
| URL | http://enlightened-education.com/wpcontent/uploads/2020/04/evolving/888888.png | High | Score 58/100 | First seen |
| URL | http://econspiracy.se/evolving/888888.png | High | Score 58/100 | First seen |
| URL | http://decons.vn/wp-content/uploads/2020/04/evolving/888888.png | High | Score 58/100 | First seen |
| SHA256 | 118fc3d93d6e34b8f1a817313e218a3a4f5baf996e03cd2be34e237b197fa0f3 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…