General
- Target Client-Built.exe
- Size 3.1MB
- Sample240627-l61ynaybpr
- SHA256 93b6b132ca4e190440d6fb64cc64f90fbd28d309fc389481ccb9ef83a49c0626
- MD5 832c32cbec14f7c575f8dde7713204b0
- SHA1 c7892e4f47987566ed7fe47bb2e35362f96d24e9
- SHA512 f7980ee0f3dc1184ee65363178a66b3341c1a18593b33ead8ed76a08e3fe5bfb5f1afa91fe13b1e439c8010e0f197e505a20d4890aec16a95d3da0a117e21dc6
- SSDEEP 49152:aI6WGoyH0I6ZUI9Iz6c/FJAAPcLPoGQNTHHB72eh2NTkS4:aI9Gdl6ZUI9UJ/8QcT
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
Client-Built.exe
Resource
win7-20240508-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
quasar
Version
-
1.4.1
Botnet
-
WormBurry
C2
-
147.185.221.20:15467
-
147.185.221.20:38852
Mutex
-
3f51338a-d72d-4e94-99b7-62b8774bafb8
Attributes
-
encryption_key
35D8C5468D502FD31B9068FF929210AF2F2ADC40
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Github.git
-
subdirectory
SubDir
Targets
-
- Target Client-Built.exe
- Size 3.1MB
- SHA256 93b6b132ca4e190440d6fb64cc64f90fbd28d309fc389481ccb9ef83a49c0626
- MD5 832c32cbec14f7c575f8dde7713204b0
- SHA1 c7892e4f47987566ed7fe47bb2e35362f96d24e9
- SHA512 f7980ee0f3dc1184ee65363178a66b3341c1a18593b33ead8ed76a08e3fe5bfb5f1afa91fe13b1e439c8010e0f197e505a20d4890aec16a95d3da0a117e21dc6
- SSDEEP 49152:aI6WGoyH0I6ZUI9Iz6c/FJAAPcLPoGQNTHHB72eh2NTkS4:aI9Gdl6ZUI9UJ/8QcT
- MD5 SHA1 SHA512 SSDEEP
-
Quasar payload