Overview

overview

10

Static

static

10

42501e281d...8b.exe

windows7-x64

10

42501e281d...8b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    42501e281de15d0331a70d0b34b94b8b.exe

  • Size

    348KB

  • MD5

    42501e281de15d0331a70d0b34b94b8b

  • SHA1

    c9ae2a74d0e25e0d2c4946917767d46d33e208cc

  • SHA256

    b85d366a889518edf0a9899e2120de042965a72fc60c8795a2f9bd6eee96d58c

  • SHA512

    aaea1b070c6560264d2875b7fb355820af4ceab172ff4c5a6b21d893ec4955419c7b673bedae66beae5626dbbacf1c6fe7860008b49029275016c4ac97392f74

  • SSDEEP

    6144:j+NHXf500Mh9fsD02Sp1bS6Zh4SRy80WUw7K:yd50ODqhZh4SYXw7K

Score
10/10
godbless my hustlequasar

Malware Config

Extracted

Family

quasar

Version

1.3.0.0

Botnet

Godbless my Hustle

C2

mill.hopto.org:7773

Mutex

QSR_MUTEX_IYpAlOHqocnX5nf6J7

Attributes
  • encryption_key

    4AVo5Pq15qMZSQfQWCXf

  • install_name

    Client.exe

  • log_directory

    Ll

  • reconnect_delay

    123

  • startup_key

    str

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • 42501e281de15d0331a70d0b34b94b8b.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections