Overview

overview

10

Static

static

10

Client-built.exe

windows7-x64

10

Client-built.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Client-built.exe

  • Size

    3.1MB

  • MD5

    e5a957d742e86069e808a4e8525a2c31

  • SHA1

    f5bca835fc48370d294c810861c2fc6d796dabfe

  • SHA256

    48d745dd6d402759d62ce57210b1023d46cf695b518149717d8a84c56979bf54

  • SHA512

    846393b81978f5ae01c4297ca1fa7d71c77206cada702f0d7f1783c2568d8afd765b1a5ab689c967130dceed1fd71aa9c1625060c67bddfa9b36ea4f1fdae63d

  • SSDEEP

    49152:QyM/j2yMy5en93hlLLzJjVrv+QZXoGdTcTHHB72eh2NT:QyOj2yMy5en93hlLLzJjVrv+e

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.4.0

Botnet

Office04

C2

127.0.0.1:4782

Mutex

58ce0e51-a8c5-47cf-937a-1d1be3708f35

Attributes
  • encryption_key

    2641D3FE9CE9887393BE5D9758F72EE9FFB5966A

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • Client-built.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections