Overview

overview

10

Static

static

10

Client-built.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Client-built.exe

  • Size

    3.1MB

  • MD5

    90939bedcfcbf3e935628f3a8645223c

  • SHA1

    3d09990a1e5417cf08afb9320611703f593c7ca7

  • SHA256

    08e2724e6a1cd29a44b0426fd415680ee8483d434bba04676bbe55bdf93b37be

  • SHA512

    94ec183ce9b853b55a20c697ebc1d8efd9dca853a38b7236ab66ec6a1ce0e4668665f2c81a78ca3c207a770040ed275442de6fd0af7bf17f154db1aa98ca1017

  • SSDEEP

    49152:zvulL26AaNeWgPhlmVqvMQ7XSKkkvi1JVAoGdjTHHB72eh2NT:zveL26AaNeWgPhlmVqkQ7XSKkkv3

Score
10/10
spikequasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Spike

C2

69.141.21.56:4782

Mutex

3b839aef-e26c-492c-a857-fcd3ee0e98a1

Attributes
  • encryption_key

    5DAE317C38FB7E0AB4DB6A9D9E117A22C59D0F2F

  • install_name

    Photonnetwork.exe

  • log_directory

    Log

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client-built.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections