Overview

overview

10

Static

static

10

xBZPckUxW4B6.exe

windows7-x64

10

xBZPckUxW4B6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    xBZPckUxW4B6.exe

  • Size

    348KB

  • MD5

    c1a3b6012424b44a5c9e900a972900df

  • SHA1

    c05570a3504b13b2ce460e303b9d2009a905d04a

  • SHA256

    aadbce9709297233303ae47d178234785598e1fd7f95e3d7366e7912a772986d

  • SHA512

    d319c45cc9ca1be876d5397c9fede4c3a0cc5e9518bee93c8c4fc1db80c81efb953db1d7fd2e5c58964fe7210be06ee10e15cc407f7e99f3c67335a56a2fea18

  • SSDEEP

    6144:5+2NHXf500MmOSPSS/xOvZboMI07dGTla:Ld50kSCS3I07dGTla

Score
10/10
dubaiquasar

Malware Config

Extracted

Family

quasar

Version

1.3.0.0

Botnet

DUBAI

C2

crazydns.linkpc.net:26133

Mutex

QSR_MUTEX_BTGrzPFXaI5R7GhtzN

Attributes
  • encryption_key

    wokDAT6I6gpQZSjhZyaS

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • xBZPckUxW4B6.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections