Overview

overview

10

Static

static

10

Nazi.exe

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Nazi.exe

  • Size

    502KB

  • MD5

    9ce91d2b2342219be8f9b78003e52317

  • SHA1

    a6d48cf347bd107b2e2055785bdbcdda44ca2058

  • SHA256

    0ccfa6f0c3d47c8c21806ea1dc918613c4c003d55fbf8f7a6aed9418aa55f220

  • SHA512

    fb3ceef61f638df4663d2b2ee62c8579c9eb891e1f9522665e663ee7b35ca01ba30b9bfa024a158e3175de1f199ad6334c4816534ff80e793b9dbcc45c5af830

  • SSDEEP

    6144:9TEgdc0YZXAGbgiIN2RSBoh22Pe3ogTQh6YYuSjqcEdOb8F9PZqGTdAZ0QcTR3e:9TEgdfY1bg8LfreuSutp77GWQcde

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.4.0

Botnet

Office04

C2

considered-arrest.at.ply.gg:553

Mutex

596082e7-6dd0-48e6-8e05-409a2b8f2841

Attributes
  • encryption_key

    3E946EA967E48A1C0D29A6230F90CFD5213732DE

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    System

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • Nazi.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections