Overview

overview

10

Static

static

10

True-Bootstrapper.exe

windows11-21h2-x64

10

Resubmissions

08/08/2024, 04:35

240808-e7313stbnb 10

08/08/2024, 03:50

240808-ed3s8aygqk 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    True-Bootstrapper.exe

  • Size

    3.1MB

  • MD5

    6082d5311c07b44ec1778f62da5e482f

  • SHA1

    1fd7a8c27ede7d4c6b713deeaa01aa9698b437f4

  • SHA256

    826b7c6ae5ffb745e69413d1070e3e5e4da1a919b0b5cecc8cb68943be85de13

  • SHA512

    4cb40d8164403fe8bdac8a215a65d5c1c3872edf5ec5c594875d07d748c383b43a2e65a4e361ba74ed7ec2c78649c76ddc893600adea0b34e8a4fa61ed761e60

  • SSDEEP

    49152:DvxhBYjCO4Dt2d5aKCuVPzlEmVQL0wvwkaF6xLzoGdxUTHHB72eh2NT:Dv5t2d5aKCuVPzlEmVQ0wvwfUx3

Score
10/10
bootstrapperv1.5quasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

BootStrapperV1.5

C2

192.168.1.8:4782

Mutex

ef2daa4a-5fe6-4ae9-8c41-c6cb7782deb2

Attributes
  • encryption_key

    A60A789933B6B1FF275BE32C9A1FEBEE7B8AEAA9

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Bootstrapper.exe

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • True-Bootstrapper.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections