Overview

overview

10

Static

static

10

7b9d9f41d2...4a.exe

windows7-x64

10

7b9d9f41d2...4a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b9d9f41d274ddd8fac0544e188ade4a

  • Size

    3.1MB

  • Sample

    240319-eeywnahe3w

  • MD5

    7b9d9f41d274ddd8fac0544e188ade4a

  • SHA1

    20050de536fbf27cdbfbdd0671af913e04106363

  • SHA256

    50684cb3400e3cd4959c2ccd2dd900a157ef3163179adcf8da15ed5b7b41694b

  • SHA512

    c102873fa15ffd776ab17b16cd39d6ac95c8412dc8c4a0c8c28e1579dd0d03f9fa4f4985d419a76cd4853c5769ea4e95a24c4c1a9c61c98b7508d97c13b345af

  • SSDEEP

    49152:zv2I22SsaNYfdPBldt698dBcjHXaRJ6qbR3LoGd1THHB72eh2NT:zvb22SsaNYfdPBldt6+dBcjHXaRJ6E

Score
10/10
quasarkz1spywaretrojan

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

KZ1

C2

77.232.132.25:4999

Mutex

8892f097-602a-41ca-8df2-0bf3fd113bd2

Attributes
  • encryption_key

    790BD6D1C1540AE1BFB811F2DC1E0185525C5DCB

  • install_name

    LestaClient.exe

  • log_directory

    LestaLogs

  • reconnect_delay

    3000

  • startup_key

    Lesta Game Center

  • subdirectory

    Lesta

Targets

    • Target

      7b9d9f41d274ddd8fac0544e188ade4a

    • Size

      3.1MB

    • MD5

      7b9d9f41d274ddd8fac0544e188ade4a

    • SHA1

      20050de536fbf27cdbfbdd0671af913e04106363

    • SHA256

      50684cb3400e3cd4959c2ccd2dd900a157ef3163179adcf8da15ed5b7b41694b

    • SHA512

      c102873fa15ffd776ab17b16cd39d6ac95c8412dc8c4a0c8c28e1579dd0d03f9fa4f4985d419a76cd4853c5769ea4e95a24c4c1a9c61c98b7508d97c13b345af

    • SSDEEP

      49152:zv2I22SsaNYfdPBldt698dBcjHXaRJ6qbR3LoGd1THHB72eh2NT:zvb22SsaNYfdPBldt6+dBcjHXaRJ6E

    Score
    10/10
    quasarkz1spywaretrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks