Overview

overview

10

Static

static

10

Client-built.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Client-built.exe

  • Size

    3.1MB

  • MD5

    71a0c5a5adf0e31a9a7d5049df30a0c9

  • SHA1

    254b10c776de6eb00bb4f8bd6af6f2fad7504d93

  • SHA256

    40c3cebca3629128e5dcce153360e7063ce9cec2772cefeb54c27b439933b3f9

  • SHA512

    22446cf5b4bbad57476c48e7874ccb9fae1b81d76bfeba401db0b53e780bfbd8f75fd96cffe39481924e8a3927826be032dbefc658b69b3967abeeb736edd20a

  • SSDEEP

    49152:KvOI22SsaNYfdPBldt698dBcjHXtIvNno/dGNTHHB72eh2NT:Kvj22SsaNYfdPBldt6+dBcjHdIvh

Score
10/10
optimizerquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Optimizer

C2

Sanael-41038.portmap.host:41038

Mutex

837a9b4d-50cb-4e50-a095-4855bd7434de

Attributes
  • encryption_key

    CCDD1275F74D60DB1CA20789B7A96E00FB350813

  • install_name

    clean.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Nexus Optimizer

  • subdirectory

    Optimizer

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client-built.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections