Overview

overview

10

Static

static

10

Client.exe

windows7-x64

10

Client.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Client.exe

  • Size

    3.1MB

  • MD5

    986a462fbccd937500591c9355ef6da9

  • SHA1

    b8dd309bfb4265fa36b750e0216602ab3568a62c

  • SHA256

    37940f7f9e6671275eb391df920c80a26eebf09d4ce2f1b2d3df081b39eb019b

  • SHA512

    ae49ebe92163002e1590712224ecafa08422d6def85a89f0ba9ab0b02ecd78af128668563a4aec4839f27a5c240f8c901909adf3aab263d50f7ec381309d28cc

  • SSDEEP

    49152:SvyI22SsaNYfdPBldt698dBcjHHcRJ6DbR3LoGdBdTHHB72eh2NT:Svf22SsaNYfdPBldt6+dBcjHHcRJ61x

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Office04

C2

192.168.56.1:4782

Mutex

7d9f40da-80a1-4066-b692-1b1a3a3ee285

Attributes
  • encryption_key

    879B7AA3170A8C53547D3941504C7786DC9C313F

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections