Overview

overview

10

Static

static

10

winrar.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    winrar.exe

  • Size

    348KB

  • MD5

    b06844790c28a1bf73858871687b273f

  • SHA1

    18415ee3b05b427ffa59eebae76d1e8a4f06b151

  • SHA256

    b3bcea18033e5d2d976c6673e4b6226e68968be01fc07076d47d605ae0008b12

  • SHA512

    f8a70365ea769132bab2d157b5d82c0ea50864df04e3c08fccfdddc2f7026350276b319ecef94a2b388da204ce2039eb2be6510477f749959e5a50d6a653dd0a

  • SSDEEP

    6144:AI6bPXhLApfp+cJmYmVb78JZ7SiJjP/L7+:pmhApgvcZ73jP/L7+

Score
10/10
faresss cryptooquasar

Malware Config

Extracted

Family

quasar

Version

1.3.0.0

Botnet

FARESSS CRYPTOO

C2

mvps-remote.duckdns.org:102

Mutex

QSR_MUTEX_sjyq77OeCQzaX8GqSu

Attributes
  • encryption_key

    1gDSJQgRjvvOjCfzxb41

  • install_name

    winrar.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    winrar

  • subdirectory

    winrar

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • winrar.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections