Overview

overview

10

Static

static

10

test.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    test.exe

  • Size

    3.1MB

  • Sample

    240502-t7l5wsch3w

  • MD5

    e9f5ad3ff8223b182d655e24a2e8fcc6

  • SHA1

    a950f1844d98d92bc6448dcb2af646a1a50804b3

  • SHA256

    1136f014768e8f6b501fc23f4e2d55a9d7fb9e57104fe71d25d201f4a39477c8

  • SHA512

    a88702ec4c68b7d4ea3a716fdcd5cc1a7233a175964d98949b6a6755e2f24f4271ba01ee3341349d7291af701e358649ec251bd9a7149c74ad87b653761bcb6b

  • SSDEEP

    49152:rvfI22SsaNYfdPBldt698dBcjH+0RJ68bR3LoGd2THHB72eh2NT:rvw22SsaNYfdPBldt6+dBcjH+0RJ6G

Score
10/10
quasartestspywaretrojan

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Test

C2

fhzahzhd.gotdns.ch:4782

Mutex

436eb0f1-5ccc-4f0a-9fca-5c02381793c9

Attributes
  • encryption_key

    4332B9A996D5ABD7BE1178FB070492630A770827

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Targets

    • Target

      test.exe

    • Size

      3.1MB

    • MD5

      e9f5ad3ff8223b182d655e24a2e8fcc6

    • SHA1

      a950f1844d98d92bc6448dcb2af646a1a50804b3

    • SHA256

      1136f014768e8f6b501fc23f4e2d55a9d7fb9e57104fe71d25d201f4a39477c8

    • SHA512

      a88702ec4c68b7d4ea3a716fdcd5cc1a7233a175964d98949b6a6755e2f24f4271ba01ee3341349d7291af701e358649ec251bd9a7149c74ad87b653761bcb6b

    • SSDEEP

      49152:rvfI22SsaNYfdPBldt698dBcjH+0RJ68bR3LoGd2THHB72eh2NT:rvw22SsaNYfdPBldt6+dBcjH+0RJ6G

    Score
    10/10
    quasartestspywaretrojan
    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Tasks