Overview

overview

10

Static

static

10

mailpass_g...er.exe

windows7-x64

10

mailpass_g...er.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    mailpass_grabber_checker.exe

  • Size

    3.1MB

  • MD5

    8b8b8e63ee314ca7e7fb41b1505c8bb2

  • SHA1

    01b3ae7b9f46b8dd21a98326b327417b0a2aed4a

  • SHA256

    5f1dd77b816aebcbf1238bd4af19e7e5a88f946210998ad30a9cd829c7f9ae2c

  • SHA512

    327ed2570e5bfab4ad6c1dd40df4d1e98d7afb5dda5acb0b101ec0e22d55d90dcb2cb0a1f73db96047bbc6b419de2b8350e91520395af34fe26f5e2f4596a698

  • SSDEEP

    49152:SvTt62XlaSFNWPjljiFa2RoUYImkyj3wyck//4oGdMJTHHB72eh2NT:SvB62XlaSFNWPjljiFXRoUYINym

Score
10/10
pcquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

PC

C2

85.215.149.159:5464

Mutex

ee30a48c-07fe-47de-a88d-5542a9407485

Attributes
  • encryption_key

    15B77B25A069D605CCCD54B1C03E024CB16CA802

  • install_name

    desktop.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    desktop

  • subdirectory

    win_dir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • mailpass_grabber_checker.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections