General
-
Target
b36d08e7258bd1ce13ac7b32ad34b6fc.exe
-
Size
502KB
-
MD5
b36d08e7258bd1ce13ac7b32ad34b6fc
-
SHA1
745f25a4ff447be0f7f6eaa31386ddd577353154
-
SHA256
801e585c7d99f8b20e9d68509c340d1f16f5e5756c1183ed806ec6e671c17ee6
-
SHA512
70f5f42687de9bbf1e5f0ad8bb862cff92954e8018195094968c054d2d8dfec750c51d95da58f9c44ebaf265f85a41d52625782f952a42330fc72854aea5e35d
-
SSDEEP
12288:0TEgdfY8l6sVd5Hl49yw5Spc7ajTecdi:5UwMJHQyw5Sp3Wcdi
Score
10/10
Malware Config
Extracted
Family
quasar
Version
1.4.0
Botnet
blue3
C2
125.177.149.250:4782
misov.asuscomm.com:4782
misov.kro.kr:4782
Mutex
4547f595-e0c1-4f30-93a6-2dfdc145e1c2
Attributes
-
encryption_key
6DBCF6C041C55190C285DDD96C210DFEC70016B1
-
install_name
updata.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
OBS updataer
-
subdirectory
OBS Updataer
Signatures
-
Quasar family
-
Quasar payload 1 IoCs
Files
-
b36d08e7258bd1ce13ac7b32ad34b6fc.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections