Overview

overview

10

Static

static

7

Fivem Unbanner.exe

windows10-2004-x64

10

Resubmissions

14/07/2024, 10:33

240714-mlmqzazakb 10

14/07/2024, 10:26

240714-mgzvqswgjm 7

14/07/2024, 10:22

240714-mejqqswfnk 7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Fivem Unbanner.exe

  • Size

    4.7MB

  • Sample

    240714-mlmqzazakb

  • MD5

    1afc702a11b453d8d16b89b69d43da15

  • SHA1

    5ba5da1b24a4a8f55e55837ed8e5d69d2de07a89

  • SHA256

    8b238d92912eda7ccba4d3c99c0531cb2ebc773b38bd8780bcdc76c5a9112da4

  • SHA512

    7c59d1d6d5c53bbeeec4ba7403abb722956359c201c0d3df8e8e6190d20321dfdcc9a01ba869edbc153b64091134ef776a29d0512cd4221ab4e82d06a819eb04

  • SSDEEP

    98304:FAyQIw/eo+QaxtkMLfJJyggZjUDCtQQJ9frdcohActgfjcGufm/fXp2GoYSDyQiR:FAyQIGDYWIBJygujqCtR9bU4eXXtS+QT

Score
10/10
quasarcryptedspywaretrojanupx

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

CRYPTED

C2

185.208.158.117:4782

Mutex

4f19e822-b39b-4ec3-9375-1140aa130dfe

Attributes
  • encryption_key

    F54A4106725C4FC7F5333915C425CE190DA1E1C1

  • install_name

    dllworker.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    dllworker.exe

  • subdirectory

    SubDir

Targets

    • Target

      Fivem Unbanner.exe

    • Size

      4.7MB

    • MD5

      1afc702a11b453d8d16b89b69d43da15

    • SHA1

      5ba5da1b24a4a8f55e55837ed8e5d69d2de07a89

    • SHA256

      8b238d92912eda7ccba4d3c99c0531cb2ebc773b38bd8780bcdc76c5a9112da4

    • SHA512

      7c59d1d6d5c53bbeeec4ba7403abb722956359c201c0d3df8e8e6190d20321dfdcc9a01ba869edbc153b64091134ef776a29d0512cd4221ab4e82d06a819eb04

    • SSDEEP

      98304:FAyQIw/eo+QaxtkMLfJJyggZjUDCtQQJ9frdcohActgfjcGufm/fXp2GoYSDyQiR:FAyQIGDYWIBJygujqCtR9bU4eXXtS+QT

    Score
    10/10
    quasarcryptedspywaretrojanupx

    • Quasar RAT

      Quasar is an open source Remote Access Tool.

      trojanspywarequasar

    • Quasar payload

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks