#qakbot

From OneNote to Quakbot (BB12)

Malware Analysis / 13 February 2023

Attackers started recently to use Microsoft OneNote file to distribute malwares by email. I’ve decided to take a to public sample and analyse it (Thanks @pr0xylife for sharing it !). To proceed, I’ll use my Malware Analysis Lab as described here. I’ll start with a static analysis of the file to discover what will be […]

From OneNote to Quakbot (BB12) Read More »

Unboxing a Quakbot Campaign with Malcat

Malware Analysis / 19 July 2022

I recently received a phishing email to analyze, let’s see how to unbox all the components and identify them using Malcat. We can notice how good is this phishing attempt :– the sender was known by the recipient– the mail was written in correct french (quite unusual)– the mail contains and old discussion from 2021

Unboxing a Quakbot Campaign with Malcat Read More »