Overview

overview

10

Static

static

10

test.exe

windows10-1703-x64

10

test.exe

windows10-2004-x64

10

Resubmissions

16/08/2023, 10:13

230816-l87h8aca2t 10

16/08/2023, 09:32

230816-lhxlbsbg91 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    test.exe

  • Size

    3.1MB

  • MD5

    eecdbc78d76691a6be6cecc14a09968e

  • SHA1

    01cbea73481a01dfcbf5e84abb060d2915e4684c

  • SHA256

    781ecb1f7366bf4ae82fc447898d1ec82f49a48787dff6b0bfb9a0f69e85c354

  • SHA512

    1460dea51eef202616ce842586e3c0e4b561cdaf8cdc974a2a5a2cb5c6a0d64e4e592f0c2803aa8dfba9392f07d41573802fad5bc8a48c6cf1b8651cc1d849c6

  • SSDEEP

    49152:GHl592AYawl1WPOl6NVtRkJ0xEEmxR16cbRi+oGdhTHHB72eh2NT:GH/92AYawl1WPOl6NVLkJ0xEEgR16w

Score
10/10
officequasar

Malware Config

Extracted

Family

quasar

Version

1.0

Botnet

Office

C2

7.tcp.eu.ngrok.io:11273

Mutex

f66b5493-61eb-4d81-92bf-7cdd5011ca71

Attributes
  • encryption_key

    5C8FA74B508E07066B897AA659A1D34132B54635

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    1

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections