Overview

overview

10

Static

static

10

xr7cLQMx2Alb.exe

windows7-x64

10

xr7cLQMx2Alb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    xr7cLQMx2Alb.exe

  • Size

    916KB

  • MD5

    a3780d1acea7799523939341e3e2b329

  • SHA1

    12a86907ae9bf3064a4e585bb88a54ca9c4517bd

  • SHA256

    aac2a46338d7fc35f813863709d2622e53fa1a66facefd6133fa69f4d74e1b3b

  • SHA512

    4fb3a558bd3fc0737247c8e5346b6c3d5e43344f99b68259a9a7bba00a9fc3ee0d775b8588f17ba60423682387e24aaa7e810c6232d51280088f1bf2c793ab24

  • SSDEEP

    24576:tNNzGTYAZN0gGkaoOsiwW0ZzELusJLK1lk6QLP:BGTYAZN0gGkaoOsiwW0Zzek1lk

Score
10/10
rclientquasar

Malware Config

Extracted

Family

quasar

Version

2.8.0.1

Botnet

RClient

C2

blackid-4782.portmap.io:4782

Mutex

3juMtJcF26BUtX2ca1

Attributes
  • encryption_key

    aHe6JDtoSfDjoBWJNR4T

  • install_name

    Venom.exe

  • log_directory

    Keylogger

  • reconnect_delay

    3000

  • startup_key

    Venom Client Startup

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • xr7cLQMx2Alb.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections