General
- Target executable.1896.exe
- Size 348KB
- Sample240328-mxff2age59
- SHA256 4cc0ff5f75432f7fcfdfbc9583036653f718d32283868bbb4df55247e370578a
- MD5 bd4c8a6106c3caa3ef9b316319d1175f
- SHA1 7e5fa3254f3ec6ebad91d636d2411963ab35be1c
- SHA512 187222873bafcc2b0127985bffd2a791cdb0c8fa5c6e7e0ea3b3d8ffdb677bd086d1c3676c9196ace31813063b8744f08ce5d151f28e1e10d1ab002eb10f10e5
- SSDEEP 6144:W1UhIvTCqLgt+jcgVlklNltfs/Q8nbBdFn4Wzmjc1Ucdh1:GNTCpgVlklNltf58VpMc1pdh1
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
executable.1896.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
executable.1896.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
quasar
Version
-
1.3.0.0
Botnet
-
Frog
C2
-
192.168.0.15:8282
Mutex
-
Froggi
Attributes
-
encryption_key
TtCNbZ6r2jZKvoNxinWx
-
install_name
Frog.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Frogs
-
subdirectory
Frogs
Targets
-
- Target executable.1896.exe
- Size 348KB
- SHA256 4cc0ff5f75432f7fcfdfbc9583036653f718d32283868bbb4df55247e370578a
- MD5 bd4c8a6106c3caa3ef9b316319d1175f
- SHA1 7e5fa3254f3ec6ebad91d636d2411963ab35be1c
- SHA512 187222873bafcc2b0127985bffd2a791cdb0c8fa5c6e7e0ea3b3d8ffdb677bd086d1c3676c9196ace31813063b8744f08ce5d151f28e1e10d1ab002eb10f10e5
- SSDEEP 6144:W1UhIvTCqLgt+jcgVlklNltfs/Q8nbBdFn4Wzmjc1Ucdh1:GNTCpgVlklNltf58VpMc1pdh1
- MD5 SHA1 SHA512 SSDEEP
Score3/10