Overview

overview

10

Static

static

10

working.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    working.exe

  • Size

    3.1MB

  • MD5

    42134852fc267860238e9fcb89b299c7

  • SHA1

    ecbf2bc2d1471810324db6db5fc5451e37a62462

  • SHA256

    14f424deb1ad24811c0a55708c0f6f6d640ede1920e498f867ab037cd50c64fb

  • SHA512

    347b67d0baf389c3f1e2b074e3ca31ffc7c126319c3c2511806286f4762b8b46ccdd41edc440503713ae1e19c82cf0f8cda03316c43240e254381d64e374f952

  • SSDEEP

    49152:3vDI22SsaNYfdPBldt698dBcjHkdKLoGdJ7THHB72eh2NT:3v822SsaNYfdPBldt6+dBcjHkd05

Score
10/10
nullquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

NULL

C2

techfor1-59332.portmap.host:59332

Mutex

586f1c75-c539-4d67-8068-3be05d43c9e2

Attributes
  • encryption_key

    255E81AED7D0583331724823DAD92535F6637953

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    AntiVirus

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • working.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections