Overview

overview

10

Static

static

10

trojan.exe

windows7-x64

10

trojan.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    trojan.exe

  • Size

    348KB

  • MD5

    fdbd6ea7da32eaeb63ec1cbc2fc01df2

  • SHA1

    333cd74a65fec83885c48a408393e9b4ef089663

  • SHA256

    6a4056087dccf2d96184a0bdae8eea77c7beb873b6c97e4c4e6e842a1816bc65

  • SHA512

    e6345cc93f095604562ec6d042d3b60c9813658563e9a4c9c065671db4b839e5862bc32b2a0781d5303ebb96da287ac781ecfcdfcd5a157ad399d7ccee50599f

  • SSDEEP

    6144:Ig6bPXhLApfp8JrnSXysTbd4Khhb7le1x+9xe:1mhAp6JSTlFrle1x+9xe

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.3.0.0

Botnet

Office04

C2

even-lat.at.ply.gg:7776

Mutex

QSR_MUTEX_n0f6at7YDD5llBKKrq

Attributes
  • encryption_key

    01T5pNrHhhZt8FczwQmR

  • install_name

    Protect.exe

  • log_directory

    Logs

  • reconnect_delay

    30

  • startup_key

    MS Protect

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • trojan.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections