General

  • Target

    client.bin

  • Size

    3.1MB

  • MD5

    f4d16cfe4cad388255e43f258329f805

  • SHA1

    fe7cc6c9eb76b5ad97867b46d053fae601fd4a2d

  • SHA256

    8fb6ae3496d4ac025eab443d3e322b0faa3461d25b54093c9205d35746e3250e

  • SHA512

    867045eac0f7765e6bea51e62bc4ed68b1e81ce6c2843d2e08714eb391a8ac94c2571c09828286252248400ea5c12bffa50a25c8ec5ad9e6d0bb836320ec188f

  • SSDEEP

    49152:4nb7+y2FqZaVmN+PqlhU/mevlL1nYtsCeAcxUuxG2THHB72eh2NT:4nf+y2FqZaVmN+PqlhU//vlL1Yts3Bx

Score
10/10

Malware Config

Extracted

Family

quasar

Attributes
  • reconnect_delay

    5000

Signatures

  • Quasar family
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • client.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections