General

  • Target

    2024-11-01_a3b2fa7015f80bea2644aaa963f709f5_magniber_qakbot

  • Size

    4.7MB

  • Sample

    241101-zk3f9atkfs

  • MD5

    a3b2fa7015f80bea2644aaa963f709f5

  • SHA1

    406d3de703b6263ff3a06ea21b061339817726e3

  • SHA256

    0001ea31fc114b31d77b362e7e63252a0a681d5937dcb783da74677d2cae20a2

  • SHA512

    40fb89c24d097d0a2827b177ff628c6e907820b50cdbed128da0aafd41bcfed4c3bb7ffaf5cd9e690b6a18b6554a969e8bea5770a26127b2ddedb548c434a0a9

  • SSDEEP

    49152:a2V7djp+oE2ZjHoZB6EZ88JUUXIEABMRviTURcl:a2V7NpW6Y6joUx

Score
10/10

Malware Config

Extracted

Family

urelas

C2

121.88.5.183

218.54.30.235

121.88.5.181

112.223.217.101

Targets

    • Target

      2024-11-01_a3b2fa7015f80bea2644aaa963f709f5_magniber_qakbot

    • Size

      4.7MB

    • MD5

      a3b2fa7015f80bea2644aaa963f709f5

    • SHA1

      406d3de703b6263ff3a06ea21b061339817726e3

    • SHA256

      0001ea31fc114b31d77b362e7e63252a0a681d5937dcb783da74677d2cae20a2

    • SHA512

      40fb89c24d097d0a2827b177ff628c6e907820b50cdbed128da0aafd41bcfed4c3bb7ffaf5cd9e690b6a18b6554a969e8bea5770a26127b2ddedb548c434a0a9

    • SSDEEP

      49152:a2V7djp+oE2ZjHoZB6EZ88JUUXIEABMRviTURcl:a2V7NpW6Y6joUx

    Score
    10/10
    • Urelas

      Urelas is a trojan targeting card games.

    • Urelas family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks