Overview

overview

10

Static

static

10

7eae621e4b...bc.exe

windows7-x64

10

7eae621e4b...bc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7eae621e4b6bb1fff2e18c6de66ba0bc.bin

  • Size

    348KB

  • MD5

    7eae621e4b6bb1fff2e18c6de66ba0bc

  • SHA1

    9546c3d4dbeb9c681595e63f51172bd7991b5f35

  • SHA256

    95ed1e3d4d4bc99f1166a9cbe29b34fa7504b8cc355849a0e649e894655eef18

  • SHA512

    c8109701da373590ead2c37557ba50188eef3b6b82eb4616ca81e47b4e086f6c3b9e036ff757d45b3efd65106ea91a0884deca7f00da0d0b572aa56edfa45e00

  • SSDEEP

    6144:Sg6bPXhLApfpvAYWENkqQkbiX/O14fF1JgCI6:/mhApSYWs6E4fFXK6

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.3.0.0

Botnet

Office04

C2

even-lat.at.ply.gg:21969

Mutex

QSR_MUTEX_n0f6at7YDD5llBKKrq

Attributes
  • encryption_key

    H5bv6GlCoJoXcX9Q8h6S

  • install_name

    Protect.exe

  • log_directory

    Logs

  • reconnect_delay

    30

  • startup_key

    MS Protect

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • 7eae621e4b6bb1fff2e18c6de66ba0bc.bin
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections