Overview

overview

10

Static

static

10

Client-built3.exe

windows7-x64

10

Client-built3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Client-built3.exe

  • Size

    349KB

  • MD5

    e39a1d9d6534c53fc6afa0f7eef2cad6

  • SHA1

    709691165d9e58bb293ff41227e99de01337a66e

  • SHA256

    0cd2d3186a549f06203a14c62c7b46a9465bfdac39b2d57def8dc2b719d21fdb

  • SHA512

    dbdda6ba628d05d33a1710c5b03afd08148b0ae4353954d5a877a6c67c2656637ac09899b11fe6ecbc5b21fe99f55fa0848d2904ddd2b9edeb606d33ec0046c1

  • SSDEEP

    6144:RKMJx4pweP7kJS3iaxQmBF6ii9iiiMiiiiiiiiRiiisiJ68YDfCbLa2XBgJbrbTs:RKoSCmT6ii9iiiMiiiiiiiiRiiihJ68L

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.3.0.0

Botnet

Office04

C2

192.168.1.1:4782

192.168.1.212:4782
Mutex

QSR_MUTEX_iVucKYENzYZDb1vZMc

Attributes
  • encryption_key

    lUiTMvY0HtwcUzBi9VCt

  • install_name

    Updater.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Java Runtime Updater

  • subdirectory

    Java Runtime

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • Client-built3.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections