MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8a4d0f98792dbd499c3cabe38360d6091559d779c01cd814c306584114b87034. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Quakbot


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8a4d0f98792dbd499c3cabe38360d6091559d779c01cd814c306584114b87034
SHA3-384 hash: 3148258d9e8386cd9e4ac0034bcf586d38fc411f93f5f534e10a6eba4ca1e5e4803779c3cdccc93bcd09d6f1dc7b2e26
SHA1 hash: 857c0cbfe52aff4f78bb9a06684289fdbff803f5
MD5 hash: 0c9892de2aa2ab899295e65cc126ab68
humanhash: virginia-steak-west-don
File name:REF#6448_Sep_28.html
Download: download sample
Signature Quakbot
Create hunting rule
File size:839'435 bytes
First seen:2022-09-28 16:18:49 UTC
Last seen:Never
File type: html
MIME type:text/html
ssdeep 12288:lTcd5hCllTQuND8QKEi46m2Q+KAuAaswScWvy3ou7D3h6Foem4s4xis89WZJJa:loCll0hz46mSKPAasf1yZf30oUAv9mK
TLSH T11605021146C87FB5CE6C1A1C90FE1A1E53E15A8E552A798FEB33FE4AAFE754002071C9
Reporter pr0xylife
Tags:html obama207 Qakbot Quakbot

Intelligence

File Origin
# of uploads :
1
# of downloads :
296
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.26626.SvgHeur.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.JS.Dropper-4.UNOFFICIAL
Create hunting rule

Verdict:
No Threat
Threat level:
  2/10
Confidence:
100%
Link:
https://www.filescan.io/uploads/633473f9d5955f6f49d543ce/reports/ba3a4a7e-6d11-40f7-8ab3-4286f1fa6c0f/overview
Result
Verdict:
UNKNOWN
Details
Base64 Encoded URL
Detected an ANSI or UNICODE http:// or https:// base64 encoded URL prefix.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8a4d0f98792dbd499c3cabe38360d6091559d779c01cd814c306584114b87034/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=rjgq7gdzfw6uthb4vprygygwbekvtv3zyaonqfgdazmecffyoa2a._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.14
Link:
https://yomi.yoroi.company/submissions/8a4d0f98792dbd499c3cabe38360d6091559d779c01cd814c306584114b87034

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments