Overview

overview

10

Static

static

10

client.exe

windows7-x64

10

client.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    client.exe

  • Size

    3.1MB

  • MD5

    f4834ebe0594791655bf5b6f3fc0771d

  • SHA1

    57bba22667125e3295d1584ef1fa083da0f37ac2

  • SHA256

    acf9331cd31f64fb602a8e60d101295261f0b68ed73ed0a67895e82c71a89f19

  • SHA512

    2dc36d0a534e742f37ce10613ff0daea5e9d8a82b5cb11caa3ffe04b10bd08570f8d993096222b22e1a80a97c5acc57d724b507208790376599934e953978d93

  • SSDEEP

    49152:fv3I22SsaNYfdPBldt698dBcjHfxrEDk9k/JxtoGdB0THHB72eh2NT:fv422SsaNYfdPBldt6+dBcjHfxCD

Score
10/10
lolquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

lol

C2

care-somewhere.gl.at.ply.gg:38177

Mutex

d5886a53-ec83-4626-aef5-bb8de105a691

Attributes
  • encryption_key

    84DBE7346FCC309754363914F6D0E15701AC8428

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Update

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections