Overview

overview

10

Static

static

10

CHECKER V2.exe

windows7-x64

10

CHECKER V2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    CHECKER V2.exe

  • Size

    502KB

  • MD5

    aa0bd907cede03c370d7863103f7e153

  • SHA1

    4aa0cbbad02417e166d33acb30ed52d385a35c7d

  • SHA256

    d262b02a774635bf5baef0fd67b74dc49ca7cdb3cc96ddad41f36feb727acf89

  • SHA512

    af82eb199092ac3b1ab0463af4774d68df7d329567aeef36ac93610381bbe25de7782156a29824e6627bf7c4f3bf403b4e31027feb8c941ed19c0e5c040ee9aa

  • SSDEEP

    6144:RTEgdc0YJX7IxUpGREWyOdYB8oeRKLEV5guKwJ+KcEBOb8F9GRHClZSscTR3Y:RTEgdfYaxUudYOJv9KwvRp4tClZhcdY

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.4.0

Botnet

Office04

C2

pool-bernard.at.ply.gg:60078

Mutex

88167cc1-6ab0-428b-b881-12fe80690052

Attributes
  • encryption_key

    F8AC1C0C6971A4F35403EFD8C57476151C7CE9C7

  • install_name

    Protect.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    MS protect

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • CHECKER V2.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections