Resubmissions

25/08/2025, 18:11

250825-wswrwszr12

27/04/2024, 16:11

240427-tmy9qadd7t10

27/04/2024, 12:22

240427-pj8a1aba5t10

General

  • Target
    SeroXen.exe
  • Size 38.6MB
  • Sample240427-pj8a1aba5t
  • SHA256 7cb37cd110a388998ce95819da915446331f614a5da8d5cfeed953812ada23f1
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Signatures

  • Quasar family
  • Quasar payload 1 IoCs

File Explorer

  • SeroXen.exe
    .exe 38.6MB

SeroXen.exe

  • IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
  • SHA256 7cb37cd110a388998ce95819da915446331f614a5da8d5cfeed953812ada23f1
  • MD5 SHA1 SHA512 SSDEEP
  • Quasar payload

PE Signature issue

Digest
92:91:9c:08:de:7b:01:3c:33:6c:21:e5:08:45:c9:fd:94:9b:f3:6e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN={C97DFA28-2A19-440B-8EB4-4EA8ABAEC4A4}
Chains

Apr 26, 2024

Minor OS version
0
Major OS version
4
Entry point
40395734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths