Overview

overview

10

Static

static

10

$77 Detection.dll

windows10-2004-x64

1

$77 Removal Tool.exe

windows10-2004-x64

10

Guna.UI2.dll

windows10-2004-x64

1

Mono.Cecil.dll

windows10-2004-x64

1

Mono.Nat.dll

windows10-2004-x64

1

netstandard.dll

windows10-2004-x64

1

Resubmissions

03/05/2024, 18:24

240503-w16basfh82 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    obvious rat niggaa.zip

  • Size

    1.6MB

  • MD5

    9a9593e8311a5aae9a66bde1b7a5ab15

  • SHA1

    27c32d63d96ef2c6d99896e649107c3c3254b365

  • SHA256

    0ab74ff99068e4cdaf14dc3770619637a92381be06682ff77578050b4ab4265e

  • SHA512

    25be1387eec11fd07dfef9d74744d6bea38e3c3550c5a9dd7dab172e072cda6d9c315d2504ad046d9de81fb3b587fe06a445c640293b2f140b1ab8d7f6b03809

  • SSDEEP

    49152:Cl4xHkTvSCQtNJ08bh4CLECHkCCHUXU71YK+:C+7NJXbaCQCBC0X03+

Score
10/10
$77 flusherquasaragenttesla

Malware Config

Extracted

Family

quasar

Version

3.1.5

Botnet

$77 Flusher

C2

even-lemon.gl.at.ply.gg:33587

Mutex

$Sxr-3vDee7FzoJnhqjuE3n

Attributes
  • encryption_key

    GX9vycIPcQc04h4dOPgm

  • install_name

    $77Remover.exe

  • log_directory

    Logs

  • reconnect_delay

    1000

  • startup_key

    $77 Rootkit Remover

  • subdirectory

    $77 Removal Tool

Signatures

  • AgentTesla payload 1 IoCs
  • Agenttesla family
    agenttesla
  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • obvious rat niggaa.zip
    .zip
  • $77 Detection.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • $77 Removal Tool.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Guna.UI2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Mono.Cecil.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Mono.Nat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • netstandard.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections