Overview

overview

10

Static

static

10

Client-built.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Client-built.exe

  • Size

    3.1MB

  • MD5

    819ccc52d7fefbd0962da73a9360885b

  • SHA1

    23134ee19b8193493ac1f064343f9218c6be8218

  • SHA256

    16b0bf4e024d5548a88eb827ead14cc6f0be62d0ab023ff9d1a21e6c3ea2c230

  • SHA512

    c0aea9093f1bc90bd987c57a237ca48d571caef87e7831ea704d5005c4b158a947e2f1bab2425008c2783cab2604c436c2c6ab5ee0cb1cb156d412a177c37cb3

  • SSDEEP

    49152:2vtt62XlaSFNWPjljiFa2RoUYIhXxNESEuk/iwLoGdYSTHHB72eh2NT:2vP62XlaSFNWPjljiFXRoUYINxhOI

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Office04

C2

89.244.81.23:4782

Mutex

2133a993-dae1-49b1-bfbb-4f8e5a998e93

Attributes
  • encryption_key

    667A5A03028317A85A6DC653E03053EE04F364BC

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    1000

  • startup_key

    Discord

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client-built.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections