Overview

overview

10

Static

static

10

incognito.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    incognito.exe

  • Size

    3.1MB

  • MD5

    34fffd9d3bfcf899dd8deaee8eb4810b

  • SHA1

    e5de408e19e84cb359bdb4ed84c9273c23e20f28

  • SHA256

    a66394c2fd8587c0f7ddb189ad4e5d54456563c794f453c489f9c2f3c4225288

  • SHA512

    f3e930f566453849cb7c662d3ae2f7135a4880ef38744b1580a79c333487f74fdb4ab92c06237e7bee612e94a72a1623452d83099830567bdbf7e8187921365c

  • SSDEEP

    49152:WvmI22SsaNYfdPBldt698dBcjH7Ca1JDLoGdxqTHHB72eh2NT:Wvr22SsaNYfdPBldt6+dBcjH7C+h

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Office04

C2

gakimyny-40562.portmap.host:4782

Mutex

46e7ef3b-8d62-4396-a1b6-7d8a2353e907

Attributes
  • encryption_key

    4CCD03EE2B3F5EBE1286E32B25E48A9D2C6CC0F5

  • install_name

    incognito.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    CrashHandler

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • incognito.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections