InQuest Flash Alerts

In this Flash Alert, we examine a single instance of over 1000 related samples of malicious document carriers that deliver QBot. We hope that this break down of some characteristics helps with mitigation efforts.

Fig 1. Graphical Lure Low Detection:

Remcos: R0lls R0yce Sighting

Dridex XLS maldocs with an updated Fancy Image Lure. InQuest Score

XLS Zloader Documents still getting 0's "Doughnuts" from AV Detection on VirusTotal: Zloader XLS maldocs with an updated Image Lure has emerged!