Overview

overview

10

Static

static

10

bJ11.exe

windows7-x64

10

bJ11.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bJ11.exe

  • Size

    348KB

  • MD5

    d001867ff938f296f1b03d98401833e4

  • SHA1

    a84e1ce678534dee8f48c3fe1433420b17d3ac64

  • SHA256

    5a741ef4cb97d9e31e89328404474eed99f685cf60bb63dcf86e7be4e4e9e269

  • SHA512

    e50dd6a939e82ecccb15ed1c27ac2685eee1ffbf664d2c9b59e8e6b60602fe4f49c487f05135c6849c4f9a3d9a316576b01d28c366733a00983f2a4a6ff627ee

  • SSDEEP

    6144:v46bPXhLApfpTCahJqLhQPcbWhhyBPVu0BXi2:AmhApvhJHnhiVu0BS2

Score
10/10
xxxxxxxrcquasar

Malware Config

Extracted

Family

quasar

Version

1.3.0.0

Botnet

xxxxxxxRC

C2

qsar1928.duckdns.org:2158

Mutex

QSR_MUTEX_sigOedjQb38nZ7vJ3Q

Attributes
  • encryption_key

    hqEzPThiLx44k3QYmA1s

  • install_name

    Java.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Java

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • bJ11.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections