Overview

overview

10

Static

static

10

Vanta-Chea...at.exe

windows7-x64

10

Vanta-Chea...at.exe

windows10-2004-x64

10

Vanta-Chea...rv.sys

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    Vanta-Cheat-main.zip

  • Size

    229KB

  • MD5

    0d4ced295322e0b77f2a3851c107ef8a

  • SHA1

    0b98a050c661d193d071da9a00a383d9e2271986

  • SHA256

    d55faa993d95eb0a4bb6c30af1b534cee0d4e49d34f7ec21498ac7e361033856

  • SHA512

    626f9addb303e0330dc984caedd49551fa691162cdbc6586c7978473b97554fbf2369d22302eade2c19b4a2c42fb58c1bae40024dae242436bf608bd2035e003

  • SSDEEP

    6144:J0Ss1HKFVOCAIedgCKvmWthOfLH0ONGS3ur/Ixkv:SSsi5jthODHRsrAxA

Score
10/10
githubquasar

Malware Config

Extracted

Family

quasar

Version

1.4.0

Botnet

Github

C2

4.tcp.eu.ngrok.io:16568

Mutex

c4dbc28d-96ce-4980-a57d-64960ef16483

Attributes
  • encryption_key

    2DF886797482131A8A031480065045A79BA132CF

  • install_name

    Runtime.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Google Chrome

  • subdirectory

    Windowshelper

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Vanta-Cheat-main.zip
    .zip
  • Vanta-Cheat-main/README.txt
  • Vanta-Cheat-main/Vanta Cheat.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Vanta-Cheat-main/Vanta7Drv.sys
    .sys windows:10 windows x64 arch:x64

    a7f039eec35ab460140e0a9ddf36c423


    Headers

    Imports

    Sections