Overview

overview

10

Static

static

10

CelexV2.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    CelexV2.exe

  • Size

    3.4MB

  • MD5

    4424dc01f083153acb2b7b54c59c12d6

  • SHA1

    eb145242d4eb3af93fe0ae74b8f1939ec3ff84b5

  • SHA256

    0557e09b83327fb20bd2bc19bb5191037e390c6865507e6af5d6ed36e75ab9e6

  • SHA512

    8a626b850ca3152060288a2ae3cee111e6b3f7dfdfdff498a4518ccc6bcc3da69616bbff3103f4cf7cecd14236ea3b1de6da5b687f9f861f9f284526f8269c7f

  • SSDEEP

    49152:2vBt62XlaSFNWPjljiFa2RoUYIUCv1JaLoGdrTHHB72eh2NTdY2b:2vr62XlaSFNWPjljiFXRoUYIUC0wx

Score
10/10
kamiquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Kami

C2

gaykami.zapto.org:4793

Mutex

a6e72740-75f8-4569-9d6b-650286c4ff34

Attributes
  • encryption_key

    4586CDEAC9B29D84A4925415D110E19EDB8D0A8B

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    KamiRat

  • subdirectory

    Kami

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • CelexV2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections