Overview

overview

10

Static

static

10

Client-built.exe

windows7-x64

Client-built.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Client-built.exe

  • Size

    348KB

  • MD5

    2849e5d01e8729ba9f89d2370479bad3

  • SHA1

    a48009597cd3d15ee4e36c0cac243d7bd983686f

  • SHA256

    51c4e1c3112bf2a7b328407dbb4530a493f0de9ccc6e21fd034dc9c0f995aa0d

  • SHA512

    baf832b54be0e98aa7dc25cf348cf64d43ff8f7ecf955af61e7a03632f546c4404914819e3bc506f9c05b81dc145bb69e5d34c35de135ef43e0b8ebfd0f7a7e9

  • SSDEEP

    6144:47SiPqU23zkSkRWkIfbT6jtql8U+AJP5MeL6:CoU2thH6jtqlAAfMeL6

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.3.0.0

Botnet

Office04

C2

life-chase.at.ply.gg:24297

across-trap.at.ply.gg:24506
Mutex

QSR_MUTEX_n0f6at7YDD5llBKKrq

Attributes
  • encryption_key

    50tj0NblnQJGtM0NwncH

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    ms protect

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • Client-built.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections