Overview

overview

10

Static

static

10

cc47576033...2a.exe

windows7-x64

10

cc47576033...2a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cc4757603383f74bdc4cb43d109e982a.exe

  • Size

    1.0MB

  • MD5

    cc4757603383f74bdc4cb43d109e982a

  • SHA1

    3c26e9675a330f945bf9eae00d7602a76eb1df48

  • SHA256

    0d04b1c5e6d1d5b9a9285c3e87c59017d4eacda0c08c37bc6b8c375def21994f

  • SHA512

    0857f91da57c78d4c708322088ccc6ffb6dd414c571ca726d10b28499b4dd826110f7fa9586f081cd9540efdc1b9ed7fffc2695492e4b0a94df047907bad5b2d

  • SSDEEP

    24576:1ohfC41BrFDRPNL5XVThf0iGM6PgelTsDFD5ZJL2hp:ehfC41BrFDRPNL5XVThfgMKgelTsD7n6

Score
10/10
2ccaquasar

Malware Config

Extracted

Family

quasar

Version

2.7.0.0

Botnet

2CCA

C2

thisisfakeih2d.ddns.net:4545

Mutex

GXLGIiyQp5wWhAjcFv

Attributes
  • encryption_key

    JsEHaZbfJjURZfPkp9qk

  • install_name

    face.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Client

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • cc4757603383f74bdc4cb43d109e982a.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections