Overview

overview

10

Static

static

10

d865e083f4...e1.exe

windows7-x64

10

d865e083f4...e1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d865e083f4107a294a4fbb16abaa7ae1.exe

  • Size

    502KB

  • MD5

    d865e083f4107a294a4fbb16abaa7ae1

  • SHA1

    d55ab02bfdb3c754355188d03152ea656f3205f4

  • SHA256

    494184bbf8bcd2b5495a9f1de9019426abd8f6d506bd01363ed6f732dee4afce

  • SHA512

    91977fd53fcd9671b99d2a9420cb6e6a500e444553aeda35bad4ee5c519912347fbb237d92eb08eea937f12a36432a2a9747bee8b54f1d9b6f3e32d03c4d9584

  • SSDEEP

    6144:NTEgdc0YYXAGbgiIN2RSB9nIJmcqW195EtqA+yw4QUcEbOb8F9TtuPYzKcTR3u:NTEgdfYqbg9IJhM4tywyLpltugzKcdu

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.4.0

Botnet

Office04

C2

20.216.177.36:4782

Mutex

fecf9209-2c2c-4fde-a1bf-4d33ed117fba

Attributes
  • encryption_key

    37CEBA3CE9EE953F78CAB9AD524988CB7D5C0A7E

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • d865e083f4107a294a4fbb16abaa7ae1.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections