Overview

overview

10

Static

static

10

2670983fa1...7e.exe

windows7-x64

10

2670983fa1...7e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2670983fa18c14df5576ea62debb9d7e.exe

  • Size

    502KB

  • MD5

    2670983fa18c14df5576ea62debb9d7e

  • SHA1

    1bbdbc2492dddfcdc40d5621a5b8c7f940a2b62c

  • SHA256

    3a32322c75aa49f95614d461e45df217d15cbd40fb5e374c693b27acba26ac1e

  • SHA512

    51db20d5a6eb9469a4350946e265033ab45f1fb8b25661a4202b93db4a9f65494c23ac169cc15009cb511f3719e505e03175b0ea904eab5aaed5f6942d65522f

  • SSDEEP

    12288:VTEgdfYnbgUex5a4JywdJp9DWXCUCcd2:2UwZSJywdJpe4cd2

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.4.0

Botnet

Office04

C2

20.216.177.36:4782

Mutex

fecf9209-2c2c-4fde-a1bf-4d33ed117fba

Attributes
  • encryption_key

    37CEBA3CE9EE953F78CAB9AD524988CB7D5C0A7E

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • 2670983fa18c14df5576ea62debb9d7e.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections