General

  • Target

    Client.exe

  • Size

    535KB

  • MD5

    3075e2435ba7bbedbb120477e9b47471

  • SHA1

    c27d4301b4450df914375e506cdc3e5a1d1fcf3c

  • SHA256

    059bced5efb7c7caf791345a4c42b3fce77c43f8dbf61cca312e22df51fd2560

  • SHA512

    fa03201b43b7252cccdf8b9a3e645e136b01efa777c813672933041561e6ed748a6e6f74a7f18a1bf70ba4a6efe3ab487297979e293d0b5b3dbeee7daae51a3f

  • SSDEEP

    6144:9aq44jScQ1zqCqtI6B0xUl7Pq4HxOSMbKTy0/AGW:sq44jUzwtI6Kxkbq+zy0/AGW

Score
10/10

Malware Config

Extracted

Family

quasar

Attributes
  • reconnect_delay

    5000

Signatures

  • Quasar family
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections