Overview

overview

10

Static

static

10

KannaXHopesari.exe

windows7-x64

10

KannaXHopesari.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    KannaXHopesari.exe

  • Size

    3.1MB

  • MD5

    201873c1226d5f38254aa4cdc231af3c

  • SHA1

    26728efa397f7416a5e3f9b730ce8c500c7f1cd0

  • SHA256

    3b93f06e9be8ff39d043661b7b7eeb90d2b1fcd9497a1ecbd2eaec2b093fc380

  • SHA512

    7ae7a88bcd6e37da95debf0f9506d9e56ea448bcf704453d26d9a6da7f640ffe6cb50b94a750492094b7555a2ccd372d585ad038149862cd9acdc5451f0f308e

  • SSDEEP

    49152:uvaI22SsaNYfdPBldt698dBcjH3lz5HG5FvJbJoGdOxTHHB72eh2NT:uvX22SsaNYfdPBldt6+dBcjH1Y5Fe

Score
10/10
hopesariratquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

HopesariRat

C2

kanna917-29754.portmap.host:29754

Mutex

1843fa25-5656-44ea-ba03-9b815599a3fd

Attributes
  • encryption_key

    7D4735073F4978CE9E48393C52963F01865403A6

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    hopesari

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • KannaXHopesari.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections