Overview

overview

10

Static

static

10

Venom.exe

windows7-x64

10

Venom.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Venom.bin

  • Size

    1.0MB

  • MD5

    4336dd447c0f0fb87d83a8695c0b9cf0

  • SHA1

    23396c41e0e5ea71090c2e57f5e4575663e3f7d8

  • SHA256

    519e0dc159848ec1c685b0222f55f0baf22bd790eac6066ed2e0f0289b427e12

  • SHA512

    cb178f9cbc96fdb6cacc6af7779ed68030fe08eeb26ad9501e371d6e598ab76344a66326c202ce80e7557a4f85e7b8d8e13bcfdaeef24f7f942aa02ade0e8f58

  • SSDEEP

    24576:sHynkc1ZzBvtrZHFjMKY2iCJuflBelPtu1QtqN5:Aynkc1ZzBvtrZHFjMKY2slBelIq

Score
10/10
svchostquasar

Malware Config

Extracted

Family

quasar

Version

2.7.0.0

Botnet

svchost

C2

less-monitor.at.playit.gg:32872

Mutex

XrZPXTIexzfI9K7Mac

Attributes
  • encryption_key

    FdMSldIjx0d0rRaJNx43

  • install_name

    svchost.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    svchost

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • Venom.bin
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections