General
-
Target
NEAS.f7fb7fed146a3b7685912a7a86dfa5f0.exe
-
Size
3.2MB
-
MD5
f7fb7fed146a3b7685912a7a86dfa5f0
-
SHA1
4b9781b8d36cf9c1575c227c4ab8300c8d002927
-
SHA256
2f940de94c597d2a414de4a17b60c5e62465b8ff4a8933b948839835e6a6f5fb
-
SHA512
ac20719fff9502e719f4db5313b938769b65550053298def80a01f92438fa7aaa859dc855f306c7deec1cb734010ff84c787195cd8dd6940ad1fe15c10f53880
-
SSDEEP
49152:+v3hBYjCO4Dt2d5aKCuVPzlEmVQL0wvwkaQHRJ6ebR3LoGdvjGTHHB72eh2NT:+vnt2d5aKCuVPzlEmVQ0wvwfQHRJ6Yf
Score
10/10
Malware Config
Extracted
Family
quasar
Version
1.4.1
Botnet
Fortnite Cheats
C2
alex123123123141-56619.portmap.host:56619
Mutex
e0e82f5f-2ac7-44f3-9d66-481cae9d153e
Attributes
-
encryption_key
1FD140F1D1B9DDE830E8F810D3595DFC682930E3
-
install_name
Fortnite Cheats.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Windows Defender
-
subdirectory
Fortnite Cheats
Signatures
-
Quasar family
-
Quasar payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
NEAS.f7fb7fed146a3b7685912a7a86dfa5f0.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections