Overview

overview

10

Static

static

10

3.exe

windows7-x64

10

3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3.exe

  • Size

    3.1MB

  • MD5

    9dd823f73a5c5ffbf121b9e4d482235b

  • SHA1

    417ab7794cbc8f81c7906daf12cd068c89967038

  • SHA256

    e2d93565c15b8860ad9e138c97a2bfe0f5824ece31b01aa6a808c7209026124d

  • SHA512

    27d052951958525902bf99b8d1997b8a50e8c8d1c55cca68c3a253cceabf0e2a8cf2ae8b8283e850debb6a010bc971a4e8106d5504e5cb939b609da129089a9f

  • SSDEEP

    49152:avEt62XlaSFNWPjljiFa2RoUYI4C+PJHWLoGdZzTHHB72eh2NT:avY62XlaSFNWPjljiFXRoUYI4C+Gp

Score
10/10
cheatquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

cheat

C2

194.36.25.8:4782

Mutex

272551ab-8052-4b4e-a889-aadb9092e72c

Attributes
  • encryption_key

    2257EEB177515C16042E47AEB0207ADB4DD194BF

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Java Updater

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections