Overview

overview

10

Static

static

10

test-cleaned.exe

windows7-x64

10

test-cleaned.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    test-cleaned.exe

  • Size

    3.1MB

  • MD5

    44b2a324097509eaaa56236e1f4976e6

  • SHA1

    9d575d4e98fd7948f50829b8b67684e852e0a017

  • SHA256

    f9fae3a055b38dac39083d95305b384c2b15516f303394f825f740d58d81517e

  • SHA512

    85da73bdc108a677d0546f8125e6e761458c5ef9da37f275cb1c23f97106579c4a475784cd852fec5997288c412134aba8deff4964afd6eb63d82ef7f563f4dc

  • SSDEEP

    49152:mgykoBp6ZMi3+/5cJ7+ZzAKithQRQfKKDaKaWH2Lk2Nu:mgykY0J3+KDh3

Score
10/10
quasar

Malware Config

Extracted

Family

quasar

Attributes
  • encryption_key

    111EDBD4A34792D1967E3CDE41576132A7DE2755

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • test-cleaned.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections