Overview

overview

10

Static

static

10

Fortnite 2.exe

windows7-x64

10

Fortnite 2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Fortnite 2.exe

  • Size

    3.1MB

  • MD5

    2b04b6a4bee07a58e08a4ec6b41aee67

  • SHA1

    a261a100b287f135c20344d53b95ba295f3d7a21

  • SHA256

    a8952c613324aa1ad07a85305d2893a3bae8f1741e4a0d8afbe682f8d3099e73

  • SHA512

    13f7f26c485e9eded5b74d0f2431b3add7c9e11f3dc7c579fdc59e137227716e4f14a572c9024cc1d8825e95e9c774c44bcbd250c563f482051500bc86bf962f

  • SSDEEP

    49152:zvPlL26AaNeWgPhlmVqvMQ7XSKEjxNESE+k/iuLoGdhE1THHB72eh2NT:zvdL26AaNeWgPhlmVqkQ7XSKMx5Qq

Score
10/10
serdalquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Serdal

C2

AmirAmir8565-20409.portmap.host:20409

Mutex

1954aec2-bca2-457c-8f9e-dda26563b044

Attributes
  • encryption_key

    24C4C2E29EB15906D3BCD470BE4D0D84565D339E

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Fortnite 2.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections