Overview

overview

10

Static

static

10

555.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    555.exe

  • Size

    3.1MB

  • MD5

    3e1d979f173b73c3430947c322c9551c

  • SHA1

    3139faec9df3c94194f74390998dbf23b1dc65be

  • SHA256

    5c913c277baa91638c4e993687eff82ed5a80bfe9ef754d6c44e751f97635b0a

  • SHA512

    78b658ed052fb7c95c113b33cf5ee50db5797f5d68fff29357c3399109bd75e09f4972dde9ac716df3f160d00197fea454bcd11f9b9de29e915816f6f3f0973e

  • SSDEEP

    98304:lZa0z9tXPzRK5RGC42L7lFiZl0umJM3oZRbsaVyJC7q8pYaaqJrv3uw67:jz8rWw6

Score
10/10
officequasar

Malware Config

Extracted

Family

quasar

Version

1.0

Botnet

Office

C2

7.tcp.eu.ngrok.io:11273

Mutex

c7efe0c8-2c80-4a60-bd76-07104a90d3fb

Attributes
  • encryption_key

    6E6C2C58B04AF8C01A31C4104A3160733AE5FDC2

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    233

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 555.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections