Overview

overview

10

Static

static

10

SillyGame.exe

windows7-x64

10

SillyGame.exe

windows10-2004-x64

10

Resubmissions

09/07/2023, 10:27

230709-mhc3cscc78 10

09/07/2023, 10:19

230709-mcrcsscc65 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    SillyGame.exe

  • Size

    3.1MB

  • MD5

    d7659a1a108861693b443646b8a97c50

  • SHA1

    fc5ca49e8b99c181a88607c2b698979d606cecc8

  • SHA256

    3dbe642050e6de28b87c7759cd17987c43fba3e6450de4bc54272b354d29a2c1

  • SHA512

    89fff86093e3cf8926b86a7613778b628060aad31eabdc29be0cf87397fc56f8f4da96faad1ce9a97b35b1fe3feedae26eaf5dd7651d44e0b775033ba50fa81f

  • SSDEEP

    49152:zvdhBYjCO4Dt2d5aKCuVPzlEmVQL0wvwka9A4xNESEfk/i5LoGdlTHHB72eh2NT:zv9t2d5aKCuVPzlEmVQ0wvwfy4x2J

Score
10/10
mytestquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

MyTest

C2

87.21.66.231:7777

Mutex

43a666e5-88b3-4df7-9701-02d29b39b541

Attributes
  • encryption_key

    B086CDE3328D60BC2D5B4327F58BF098C61E5C26

  • install_name

    MinecraftBackups.exe

  • log_directory

    WindowsSystemLogs

  • reconnect_delay

    3000

  • startup_key

    SystemKernelApp

  • subdirectory

    minecraft-backups

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SillyGame.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections