MITRE ATT&CKsoftware (malware)
S0650 QakBot
- Domain
- enterprise
- Platforms
- Windows
- Aliases
- Pinkslipbot, QuackBot, QBot
- Version
- 1.3
- Created
- 2021-09-27
Description
Related
Uses · MITRE ATT&CK (71)
- T1685 Disable or Modify Tools technique
- T1027.011 Fileless Storage sub-technique
- T1027.010 Command Obfuscation sub-technique
- T1036.008 Masquerade File Type sub-technique
- T1027.006 HTML Smuggling sub-technique
- T1016.001 Internet Connection Discovery sub-technique
- T1553.005 Mark-of-the-Web Bypass sub-technique
- T1059.007 JavaScript sub-technique
- T1027.005 Indicator Removal from Tools sub-technique
- T1573.001 Symmetric Cryptography sub-technique
- T1071.001 Web Protocols sub-technique
- T1572 Protocol Tunneling technique
- T1090.002 External Proxy sub-technique
- T1132.001 Standard Encoding sub-technique
- T1074.001 Local Data Staging sub-technique
- T1574.001 DLL sub-technique
- T1069.001 Local Groups sub-technique
- T1204.001 Malicious Link sub-technique
- T1204.002 Malicious File sub-technique
- T1568.002 Domain Generation Algorithms sub-technique
- T1059.001 PowerShell sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1059.005 Visual Basic sub-technique
- T1497.001 System Checks sub-technique
- T1497.003 Time Based Checks sub-technique
- T1566.001 Spearphishing Attachment sub-technique
- T1566.002 Spearphishing Link sub-technique
- T1564.001 Hidden Files and Directories sub-technique
- T1518.001 Security Software Discovery sub-technique
- T1114.001 Local Email Collection sub-technique
References
- https://securelist.com/qakbot-technical-analysis/103931/ Kaspersky QakBot September 2021
- https://cybersecurity.att.com/blogs/labs-research/the-rise-of-qakbot ATT QakBot April 2021
- https://redcanary.com/threat-detection-report/threats/qbot/ Red Canary Qbot
- https://success.trendmicro.com/en-US/solution/KA-0011282 Trend Micro Qakbot December 2020