Overview

overview

10

Static

static

10

Client-built.exe

windows10-2004-x64

10

Client-built.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Client-built.exe

  • Size

    3.1MB

  • MD5

    179f98ef7485c65b1864f25b3bad216d

  • SHA1

    754f2140970e46e0ad52acf911de2f50d8811b0b

  • SHA256

    6446a4d63d068e98e9f227ef655d4195ef0240ce3ad3f040f0b17c52a5e6b0e0

  • SHA512

    42d97bb84d99f3862ef87d2e39642bb0d0770f02d4a970cbfd01ab811a92ae7372afd65e5d849206899371cc06dbad47fd311f7d68ee0917d023fc1088f1677d

  • SSDEEP

    49152:uvXI22SsaNYfdPBldt698dBcjHYReBbRrLoGdlTHHB72eh2NT:uvY22SsaNYfdPBldt6+dBcjHYRe/

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Office04

C2

45.37.50.97:4782

Mutex

f7007fc1-3c9f-44f5-9f4a-a1b906b51b44

Attributes
  • encryption_key

    97E9CFF0CDEC31A610D73E8D91954B5BF77F8F47

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Windows Update Checker

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client-built.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections