General
-
Target
2024-11-23_eead9a03b396523c7f6ab6a44d711617_magniber_qakbot
-
Size
4.7MB
-
Sample
241123-yw17wstngt
-
MD5
eead9a03b396523c7f6ab6a44d711617
-
SHA1
1491e5d862a98174441b532b77d9c0c97f1259c2
-
SHA256
2d33010e37e78fbb3ec9f8c89a73207f2e3ff0ab69e1d40261006c6c414c5397
-
SHA512
b5ec90d6c11b64fd4ba80151f8c9206b0b450109dec05c939f4dfd584b26e717c997a7c30996f5e08fed9f140935446a902d6ac74ddf4997237f9b347d80d724
-
SSDEEP
49152:a2V7djp+oE2ZjHoZB6EZ88JUUXIEABMRviTURcx:a2V7NpW6Y6joUV
Behavioral task
behavioral1
Sample
2024-11-23_eead9a03b396523c7f6ab6a44d711617_magniber_qakbot.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
121.88.5.183
218.54.30.235
121.88.5.181
112.223.217.101
Targets
-
-
Target
2024-11-23_eead9a03b396523c7f6ab6a44d711617_magniber_qakbot
-
Size
4.7MB
-
MD5
eead9a03b396523c7f6ab6a44d711617
-
SHA1
1491e5d862a98174441b532b77d9c0c97f1259c2
-
SHA256
2d33010e37e78fbb3ec9f8c89a73207f2e3ff0ab69e1d40261006c6c414c5397
-
SHA512
b5ec90d6c11b64fd4ba80151f8c9206b0b450109dec05c939f4dfd584b26e717c997a7c30996f5e08fed9f140935446a902d6ac74ddf4997237f9b347d80d724
-
SSDEEP
49152:a2V7djp+oE2ZjHoZB6EZ88JUUXIEABMRviTURcx:a2V7NpW6Y6joUV
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-