Phoenix
Sigma IntelligenceBeta
Emerging Threats
Malware2019

QBot

1Rules
2References
1Folders
2023-02-03Latest
Summary

QBot is tracked here as a malware family or toolset with 1 Sigma detection spanning 2019. Coverage centers on windows / process_creation.

Related Detections
Search this threat
Emerging Threatcriticalstable

Potential QBot Activity

Detects potential QBot activity by looking for process executions used previously by QBot

WindowsProcess Creation
TA0002 · ExecutionT1059.005 · Visual Basicdetection.emerging-threats
Florian Roth (Nextron Systems)Tue Oct 012019
References
1
Resolving title…
twitter.com
2
Resolving title…
app.any.run