Automating Qakbot decode at scale

This is a technical post covering methodology to extract configuration data from recent Qakbot samples. I will provide background on Qakbot, walk through decode themes in an easy to visualize manner. I will then share a Velociraptor artifact to detect and automate the decode process at scale.

configuration data detect extract malware process qakbot scale share technical velociraptor