Overview

overview

10

Static

static

10

Client-built.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Client-built.exe

  • Size

    3.1MB

  • MD5

    c2dd87fb638b876c560fc55e951cc22c

  • SHA1

    7baadc86fd8421960b94ff520e946a3b877a0b87

  • SHA256

    4b9f5d65897b027f0bf6d74e2ad816590e11afaca66518607a525df265fb8fb1

  • SHA512

    f30d049a2ef686a5f72a608d9a14ffd0dbd03ca7865816785755e8db137987e98263275d2e6b3b8b248cf77610d1f5c4f88d5407d0dc81af5260ad43ecb98df3

  • SSDEEP

    49152:DvyI22SsaNYfdPBldt698dBcjHyf0j1JSKoGdUwTHHB72eh2NT:Dvf22SsaNYfdPBldt6+dBcjHyf0x

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Office04

C2

98.253.172.222:4782

Mutex

9efff4f7-870d-4f6f-aa32-d265c29d8fe7

Attributes
  • encryption_key

    F0573E5D35562D9DEE54034AA80266AECD2B330A

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client-built.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections