General
-
Target
2259304db67dd25fa5ce47bde5b1c8cffab23292c2cec7d3bc2a0c303aace85b.exe
-
Size
3.1MB
-
MD5
adcfb6fc48fe920f153d6ba5e279790f
-
SHA1
0ad8a4b0777fb91f8169c75345122755b72223cc
-
SHA256
2259304db67dd25fa5ce47bde5b1c8cffab23292c2cec7d3bc2a0c303aace85b
-
SHA512
300b83792d27f85ea446970b630f5332d3eddd900dcb90421eb12e1b4aa7b02dbff01351fe26cab47b1a0568eb5a4e4b5b5e0c3df8ba0d8c89b184af06a38438
-
SSDEEP
49152:WvzlL26AaNeWgPhlmVqvMQ7XSKbDxGPhovJl7oGd8CVTHHB72eh2NTP:WvpL26AaNeWgPhlmVqkQ7XSKKhcc
Score
10/10
Malware Config
Extracted
Family
quasar
Version
1.4.1
Botnet
Kurban
C2
mamitox.duckdns.org:1604
Mutex
a9674f8e-a278-4ef8-9966-cd33fd932b84
Attributes
-
encryption_key
003D20CB377AA334B523ED02DFFB8D8D91D26B3C
-
install_name
Valorant Coin Hack.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Quasar Client Startup
-
subdirectory
SubDir
Signatures
-
Quasar family
-
Quasar payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2259304db67dd25fa5ce47bde5b1c8cffab23292c2cec7d3bc2a0c303aace85b.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections