Overview

overview

10

Static

static

10

synapse v2,22.11b.exe

windows7-x64

10

synapse v2,22.11b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    synapse v2,22.11b.exe

  • Size

    517KB

  • MD5

    f4fda30973f8d8a6d596d4331a0a2011

  • SHA1

    ad30d2caa3450a8bd0469dcf92478bbfb9052f86

  • SHA256

    6b28bda5cd529fbc4935428c4b099c6e257ef30d1ac51587c3caa3d98946c2d3

  • SHA512

    bffe44ab651c12f72a33566469a8fe81a9fa389f0f5d8b5363ceba7d43097bd7e83af5abe6bd3d636dbc46b5fc5efac5cdfe7b729e4c308ef8c3204abe5bcc32

  • SSDEEP

    6144:MTEgdc0Y5XAGbgiIN2RSBWO9GXpWaqiCLEsmSuGwJFVcEZOb8F9LJ2jNccTR3d:MTEgdfYVbgr9GXpBrDGwJJpqNccdd

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.4.0

Botnet

Office04

C2

asscend-41247.portmap.host:41247

Mutex

d5f48dbc-9d32-47f1-a7b0-907cbd13321c

Attributes
  • encryption_key

    ADD1A4C30DB2A3E6A7A4FBA7A963126F9B86D782

  • install_name

    giant.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    WinDefender

  • subdirectory

    yelgiant

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • synapse v2,22.11b.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections