General
-
Target
2024-11-01_a3b2fa7015f80bea2644aaa963f709f5_magniber_qakbot
-
Size
4.7MB
-
Sample
241101-zk3f9atkfs
-
MD5
a3b2fa7015f80bea2644aaa963f709f5
-
SHA1
406d3de703b6263ff3a06ea21b061339817726e3
-
SHA256
0001ea31fc114b31d77b362e7e63252a0a681d5937dcb783da74677d2cae20a2
-
SHA512
40fb89c24d097d0a2827b177ff628c6e907820b50cdbed128da0aafd41bcfed4c3bb7ffaf5cd9e690b6a18b6554a969e8bea5770a26127b2ddedb548c434a0a9
-
SSDEEP
49152:a2V7djp+oE2ZjHoZB6EZ88JUUXIEABMRviTURcl:a2V7NpW6Y6joUx
Behavioral task
behavioral1
Sample
2024-11-01_a3b2fa7015f80bea2644aaa963f709f5_magniber_qakbot.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
121.88.5.183
218.54.30.235
121.88.5.181
112.223.217.101
Targets
-
-
Target
2024-11-01_a3b2fa7015f80bea2644aaa963f709f5_magniber_qakbot
-
Size
4.7MB
-
MD5
a3b2fa7015f80bea2644aaa963f709f5
-
SHA1
406d3de703b6263ff3a06ea21b061339817726e3
-
SHA256
0001ea31fc114b31d77b362e7e63252a0a681d5937dcb783da74677d2cae20a2
-
SHA512
40fb89c24d097d0a2827b177ff628c6e907820b50cdbed128da0aafd41bcfed4c3bb7ffaf5cd9e690b6a18b6554a969e8bea5770a26127b2ddedb548c434a0a9
-
SSDEEP
49152:a2V7djp+oE2ZjHoZB6EZ88JUUXIEABMRviTURcl:a2V7NpW6Y6joUx
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-