YARA rules for Qakbot
8 rules from 4 sources detect Qakbot. Rules are ranked by YARA-X compatibility, licence (full text first), score and quality. Mostly: Malware.
Family grouping is heuristic: check each rule's description.
Scan files with all Qakbot rulesSearch rules
QakBot Export Selection
MalwareSignature Base (Florian Roth / Nextron)· kevoreilly· 2023-02-17No description has been set in the source file - EmbeeResearch
MalwareEmbee Research· @Embee_Research· 2022-11-14No description has been set in the source file - EmbeeResearch
MalwareEmbee Research· Embee_Research @ Huntress· 2022-11-14Detects variants of QakBot payload
MalwareditekSHen detection· ditekSHen· 2020-11-06QakBot Config Extraction
MalwareCAPE Sandbox (CAPEv2)· kevoreilly· 2022-03-16QakBot WMI anti-anti-vm
MalwareCAPE Sandbox (CAPEv2)· kevoreilly· 2022-03-16QakBot AntiVM bypass
MalwareCAPE Sandbox (CAPEv2)· kevoreilly· 2022-03-16QakBot Export Selection
MalwareCAPE Sandbox (CAPEv2)· kevoreilly· 2022-03-16