[HN Gopher] Qakbot takedown payload analysis
       ___________________________________________________________________
        
       Qakbot takedown payload analysis
        
       Author : mvdwoord
       Score  : 28 points
       Date   : 2023-09-01 19:45 UTC (1 days ago)
        
 (HTM) web link (cyber.wtf)
 (TXT) w3m dump (cyber.wtf)
        
       | formerly_proven wrote:
       | > It is linked dynamically rather than statically, meaning it
       | depends on the Visual C++ 2015-2019 x86 Runtime being installed
       | on the system. Especially on older Windows 7/8/8.1 systems that
       | perhaps primarily use older software, it's possible this runtime
       | has not been installed by the user (or by applications they use).
       | As a consequence, the uninstall payload will crash since it
       | cannot successfully resolve its dependencies.
       | 
       | Should've used UCRT... oh wait.
        
         | [deleted]
        
       ___________________________________________________________________
       (page generated 2023-09-02 23:01 UTC)