Overview

overview

10

Static

static

10

787EEF5B06...6C.exe

windows7-x64

10

787EEF5B06...6C.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    787EEF5B064487F1E731171DE212A2B2A7974A4E8776C.exe

  • Size

    3.1MB

  • MD5

    936d37d2d727cc768790f1c2da89e49a

  • SHA1

    753c8f21c901e2fbf7b975c3475279ea7bd43dc4

  • SHA256

    787eef5b064487f1e731171de212a2b2a7974a4e8776cd78493c02e1c9592a66

  • SHA512

    f88509b5c1abc87511eff7d7fc2a19580d467090b0499da15021f353ca59344871ebf4031ef827e38c447da71294b03a18a94d6508ead6273a1e827021dfe768

  • SSDEEP

    49152:KvmI22SsaNYfdPBldt698dBcjHnln856bRULoGdfTHHB72eh2NT:Kvr22SsaNYfdPBldt6+dBcjHnln85d

Score
10/10
torrentquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

torrent

C2

office396.site:4782

Mutex

d70414f2-4dd3-4bcb-9a80-a10e93fa84cd

Attributes
  • encryption_key

    78615EA1D467BB076E091FA9B13CC309C5C69B00

  • install_name

    chrome_update.exe

  • log_directory

    Logs

  • reconnect_delay

    1000

  • startup_key

    chrome_update

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 787EEF5B064487F1E731171DE212A2B2A7974A4E8776C.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections