f0d06a914d0743cf40e2f41ce9fc529a7474d4d62bd4b0348fcae20ea8a92691 | Triage

Sharing

General

Target

2024-09-09_999106398d873865aa526f56fe3d27cf_magniber_qakbot
Size

1.7MB
Sample

240909-jgtryaxekn
MD5

999106398d873865aa526f56fe3d27cf
SHA1

2aa6207c404a267d5906a1f345ca2cd0c36b6438
SHA256

f0d06a914d0743cf40e2f41ce9fc529a7474d4d62bd4b0348fcae20ea8a92691
SHA512

30cb929214ab5d9b92177c681bc59ebfbb9bd505beaf5fd0fcf512be5a654fd2e41535dca21847c1632e334325db15aeef47c9cb23d17ad820897740c0fe16c4
SSDEEP

24576:RdNRVCr8Kj0y+G0XxGnW/yENUYT0SZXH+oWXmTKVTrX1PjXZ:R/RV+bMGWDNURSW2kTBZ

Score

8^/10

discovery

Malware Config

Targets

- Target
  
  2024-09-09_999106398d873865aa526f56fe3d27cf_magniber_qakbot
- Size
  
  1.7MB
- MD5
  
  999106398d873865aa526f56fe3d27cf
- SHA1
  
  2aa6207c404a267d5906a1f345ca2cd0c36b6438
- SHA256
  
  f0d06a914d0743cf40e2f41ce9fc529a7474d4d62bd4b0348fcae20ea8a92691
- SHA512
  
  30cb929214ab5d9b92177c681bc59ebfbb9bd505beaf5fd0fcf512be5a654fd2e41535dca21847c1632e334325db15aeef47c9cb23d17ad820897740c0fe16c4
- SSDEEP
  
  24576:RdNRVCr8Kj0y+G0XxGnW/yENUYT0SZXH+oWXmTKVTrX1PjXZ:R/RV+bMGWDNURSW2kTBZ
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2