Overview

overview

10

Static

static

10

Client-built.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Client-built.exe

  • Size

    3.1MB

  • MD5

    cc4f42c9e614d30943e6a641bf152b3e

  • SHA1

    d17cd99e858bc19fa6610c38625bb0acc98285da

  • SHA256

    4de42e0496a9862f14414c78d4d6b655aca55fb2064ece559ba8c36a8d9d6979

  • SHA512

    0625ca8d497b7b9b8196c26be4c5964e53c33017f599cfd770bfedb1352fbc473db13761103fe96c39e7f483c9a3ffd97070ddc3c266929c3a2d0dfbc8d0f62d

  • SSDEEP

    49152:rveI22SsaNYfdPBldt698dBcjHf9gKMcroGdulTHHB72eh2NT:rvT22SsaNYfdPBldt6+dBcjHVgKMQ

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Office04

C2

192.168.100.78:4782

Mutex

e6857516-29c9-4956-99ed-473a1d549175

Attributes
  • encryption_key

    D799753C7C07E74DE68398F5B1F1AD3AEE613FDC

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client-built.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections