Overview

overview

10

Static

static

10

193f4e14b5...f7.exe

windows7-x64

193f4e14b5...f7.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    193f4e14b53d594256719425184d294f0c78103e20382732adc7ba6b67bd3df7

  • Size

    5.7MB

  • MD5

    923e986b7e3922b7982a2e31b9da7dd5

  • SHA1

    9a98a638a694fcaecbc832fedc05de91750ead5a

  • SHA256

    193f4e14b53d594256719425184d294f0c78103e20382732adc7ba6b67bd3df7

  • SHA512

    02ba0764ad7b4dc11e2abf38ff657704fd70faa54d3fbd201a618f65686926f095469cd547af6a77d5233124759def274e36d4fb2d54426989628f5c0b46c4de

  • SSDEEP

    98304:tiUkwKOouyIQ3BhlNh59txRl9fxRFdRZt9BhlNh59txRN9Nx2dRZt9V1jZ7qg5:tjkwKOouyzBhlNh59txRl9fxRFdRZt9m

Score
10/10
techsmith snagitquasar

Malware Config

Extracted

Family

quasar

Version

1.3.0.0

Botnet

TechSmith Snagit

C2

zilhd.giize.com:1984

Mutex

aSFmXAfZwcNqHCATJZ

Attributes
  • encryption_key

    rtPsd4ZDhoVaIUJ3rYU7

  • install_name

    Client.exe

  • log_directory

    HDTx

  • reconnect_delay

    60000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • 193f4e14b53d594256719425184d294f0c78103e20382732adc7ba6b67bd3df7
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections