Overview

overview

10

Static

static

10

MagmaFN.exe

windows7-x64

10

MagmaFN.exe

windows10-1703-x64

10

MagmaFN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    MagmaFN.exe

  • Size

    3.1MB

  • MD5

    22b9ae401f28ade71bc0a15b3972fbfe

  • SHA1

    c5857061edffe27d21730b565d2e3cacea7a7bf0

  • SHA256

    dd0956427cdc7ad6703c85171373a1d060700f485a18daf1afc56567ffe163ff

  • SHA512

    cea1124314555010d3091937259a34c43c92d2452ddbb8dea7f60e9687a47c48c41fe69c30304be392ac8f811e46266c1a0e80737fff11e068386944264ad277

  • SSDEEP

    49152:DveI22SsaNYfdPBldt698dBcjHQTZ01JpLoGddjTHHB72eh2NT:DvT22SsaNYfdPBldt6+dBcjHQTZCt

Score
10/10
magmafnquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

MagmaFN

C2

4.tcp.eu.ngrok.io:16321

Mutex

8fcfd45a-1b32-4b49-b4cd-15666fd937b0

Attributes
  • encryption_key

    D586A40D2F782DE3D9154F379894244F11BE65C1

  • install_name

    MagmaFN.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Java Update Scheduler

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • MagmaFN.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections