Overview

overview

10

Static

static

10

Client-built.exe

windows7-x64

10

Client-built.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Client-built.exe

  • Size

    3.1MB

  • MD5

    c1e994a25762de2f670f5755cd52e30a

  • SHA1

    c085ac5fc6c32dcc4925f05eacf1d2d7c7e2567a

  • SHA256

    38a96c3ff97d6ef93c1ea99c660642e537129035b7dd7ca209873ce95081eda3

  • SHA512

    74815a0af108d39f157877d0081916ad1d1f6402be6449a8c22cb71842920cf2881a93fb16a2b8177e2d2e73f9bb28673be52ab6b04e6e96fc3768ba24d73c73

  • SSDEEP

    49152:fvmI22SsaNYfdPBldt698dBcjHsgfTpGNvJ4LxGd8cTHHB72eh2NT:fvr22SsaNYfdPBldt6+dBcjHJGOV

Score
10/10
xdquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

XD

C2

DonBaguette-43001.portmap.io:43001

Mutex

770cfd6a-1f35-4de5-a9a2-ab894e876f1d

Attributes
  • encryption_key

    0DD70E740CE6303F73E56E72D07F3605281C7192

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    svchost

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client-built.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections