Overview

overview

10

Static

static

10

quasar.exe

windows7-x64

10

quasar.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    quasar.exe

  • Size

    502KB

  • MD5

    9b67f098401a519bd1036d52bf1401fc

  • SHA1

    5574231851b12c35a23c0afcc1acfd88963faab4

  • SHA256

    39bdcb0a0d32fc64451a18f340fa379cce0728360d1d4fad11fe91cf8e57754a

  • SHA512

    a3d9dee6ba51af14ed91cb4e0eeab40c871b0564116d4991fa06efd05d0d1ffa6438940dd1844fa187ee0eb146b729e26ff8011d25bab119e82ac6f6b1cb7972

  • SSDEEP

    6144:oTEgdc0YgXAGbgiIN2RSBYnagmmBVc6YL5EtqG+yw4NUcEuOb8F9QrAYO+HcTR3G:oTEgdfYybgkagzhT4/ywZepirAT+cdG

Score
10/10
victimquasar

Malware Config

Extracted

Family

quasar

Version

1.4.0

Botnet

Victim

C2

cloudserv.ddns.net:8000

Mutex

edfd3f76-6837-43de-9b7e-b11de527df19

Attributes
  • encryption_key

    C1BA7CB527D76E6E88B6A9862E7A4FD2859C328A

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • quasar.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections