Overview

overview

10

Static

static

10

Updater.exe

windows7-x64

10

Updater.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Updater.exe

  • Size

    502KB

  • MD5

    062aeb2f3789e7a6eeb71a44b63672e9

  • SHA1

    62622e77e33747bb3edc1f29386866a13a7eac87

  • SHA256

    6fe7b6e0da70beafea5a88ed71255653b766c97b4c5dbfe48fa5b03fb943a45f

  • SHA512

    a417d573ede64c57223170b78fa55b8e7b38e8e6e439c98a03e85db30858ad3e08120a489ccd8c65c65e36fa6ddb041942f457485a06f5cd12108c908595850c

  • SSDEEP

    6144:kTEgdc0YUXAGbgiIN2RSBxCnNFm+3WLy5Etql+yw4gUcEsOb8F9mTcHV1cTR3r:kTEgdfY+bgdONFKj44ywGcpQTcPcdr

Score
10/10
controlquasar

Malware Config

Extracted

Family

quasar

Version

1.4.0

Botnet

Control

C2

193.149.176.156:8080

Mutex

84609ecb-d94d-40c4-85ff-8b3191e9d5f0

Attributes
  • encryption_key

    936C784DF6BFBCB86D89EDF1DA8425E6D70DCFBB

  • install_name

    explorer.exe

  • log_directory

    Logs

  • reconnect_delay

    1000

  • startup_key

    Windows Defender

  • subdirectory

    D3SD

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • Updater.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections