Overview

overview

10

Static

static

10

executor.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    executor.exe

  • Size

    3.1MB

  • MD5

    8e2b0fc35b089edcec7bb942d90bb559

  • SHA1

    f35e89fb5304b3128c0a1f8fb1e676d636c7ff57

  • SHA256

    b2b1733c21a6f44fa14fc4172c89bcd8e42be1a94f9cad208be9d289a4aa68bc

  • SHA512

    cb632b7691a1515102d3415fdf7d5bc8be7001d3b686207e52e9a2d4c1271ccb954ed494c88c00501fc1d88fbc17be1abe7754847207aaeb45582288cd88152d

  • SSDEEP

    49152:rvyI22SsaNYfdPBldt698dBcjH1iYCMfENoGnGTHHB72eh2NT:rvf22SsaNYfdPBldt6+dBcjH1iY4

Score
10/10
suckmyballzquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

SUCKMYBALLZ

C2

192.168.1.55:5311

Mutex

9a0cc23f-f6da-4cf2-b03f-6c70016e99d6

Attributes
  • encryption_key

    22CF498DDFFDA7F4F62EAEC6CA73FC6638514D4E

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • executor.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections