MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3b00174d5b42adf5da7fe896ce8baae14d67c52f79c49eed82bdf87e3a28d625. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Quakbot


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 3b00174d5b42adf5da7fe896ce8baae14d67c52f79c49eed82bdf87e3a28d625
SHA3-384 hash: 6e089752f14274b7cb1867d1d8d63651eac18dbf908ff67eb0454e630c4c143b851237e60103efabcb76a7d1280a6e81
SHA1 hash: 6e42d13ca4a86c289c0d956db7eaca609ade5ee8
MD5 hash: 6058a64332831c510b20951ccd49e839
humanhash: cardinal-stream-autumn-hamper
File name:JG.js
Download: download sample
Signature Quakbot
Create hunting rule
File size:10'642 bytes
First seen:2022-11-21 12:34:15 UTC
Last seen:Never
File type:Java Script (JS) js
MIME type:text/plain
ssdeep 192:7GwSLj5Uravgx685UIhpHKbP2KTMhS0OGYm9lWVjAvNzAWM5Evk7MgG+r5AJ:7G/5Kk785UIhp/KTMhSeYmn2jiu5EjPH
TLSH T1E5224D5B3D03ECFA12B37591EED920F9DC192A624C5221151C9FFB30420D7AA6E165DB
Reporter pr0xylife
Tags:1669024152 BB07 js Qakbot Quakbot

Intelligence

File Origin
# of uploads :
1
# of downloads :
272
Origin country :
IE IE
Vendor Threat Intelligence
Verdict:
No Threat
Threat level:
  10/10
Confidence:
100%
Link:
https://www.filescan.io/uploads/637b7078903ba0eaf36cd579/reports/9ebb29ed-f798-4206-b2bb-c3491195ec56/overview
Result
Verdict:
UNKNOWN
Details
Base64 Encoded URL
Detected an ANSI or UNICODE http:// or https:// base64 encoded URL prefix.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/3b00174d5b42adf5da7fe896ce8baae14d67c52f79c49eed82bdf87e3a28d625/
Threat name:
Script-JS.Backdoor.Quakbot
Create hunting rule
Status:
Malicious
First seen:
2022-11-21 12:35:06 UTC
File Type:
Text
AV detection:
7 of 26 (26.92%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=hmabotk3ikw7lwt75clm5c5k4fgwprjpphcj53mcxx4h4ori2ysq._file
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/221121-tsg8dscd9v/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.60
Link:
https://yomi.yoroi.company/submissions/3b00174d5b42adf5da7fe896ce8baae14d67c52f79c49eed82bdf87e3a28d625

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments