Overview

overview

10

Static

static

10

123.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    123.exe

  • Size

    3.1MB

  • MD5

    31b37ae40897dc09223725e2955dc4ee

  • SHA1

    1b9af17100694921f58688187263b24cf8a2aa4f

  • SHA256

    53728c26038df258f2f45cff66f660357577bc5c5050702cad4cbe2b3acbd211

  • SHA512

    cfad447f78681fb3abba1b22b6be22e79bbaddae51c052c8400937be7325edf1ecb176f44cb2675d5de2df0d2e9929b1443b90e7bf169d2440f1da07ea43cd93

  • SSDEEP

    49152:3vrI22SsaNYfdPBldt698dBcjHXx2GmzVIoGdQTTHHB72eh2NT:3vU22SsaNYfdPBldt6+dBcjHXx2q

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Office04

C2

bore.pub:1488

bore.pub:1337
Mutex

e9cb2497-1455-4807-bbbe-81dec8122c35

Attributes
  • encryption_key

    750E471A2736E4EC77FD37E3C73FCB548A7C773A

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    1

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs

Files

  • 123.exe
    .exe windows x86

    Password: test5435

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections