General
-
Target
eeee.exe
-
Size
502KB
-
MD5
61322bea8f82b4ed12d8c85cd70c8079
-
SHA1
f724703e3d8e3874aff54234f84a53eab23efd32
-
SHA256
53de1ff1d10591157bdddad9854cc69ce7456330e80cc3e847a106857b7e66c8
-
SHA512
01fe0f741838ef435eb4cfb92a3f90b5bb3537f4f81fa148e5c461c7e3552cb76f6941f662fc5d40e5b758847c31d403cdbfb0a9a2e34ec0f888bcb488a18b85
-
SSDEEP
12288:oTEgdfYKssPYpNWn24lywRXpTk+Pzcdb:dUwxwBywRXp7cdb
Score
10/10
Malware Config
Extracted
Family
quasar
Version
1.4.0
Botnet
pwned
C2
6.tcp.eu.ngrok.io:12232
bettergg.ddns.net:4782
130.61.179.221:6969
127.0.0.1:4782
130.61.179.221:1111
Mutex
687ec30b-e03a-4fab-befd-19b0f339c43d
Attributes
-
encryption_key
1DC6F66F13E1BA29675E45968551EC06FC192566
-
install_name
UpdateAgent.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Microsoft Update Agent
-
subdirectory
MicrosoftUpdateAgent
Signatures
-
Quasar family
-
Quasar payload 1 IoCs
Files
-
eeee.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections