General
-
Target
Bootstrapper.exe
-
Size
3.3MB
-
Sample
240817-nssfgatcld
-
MD5
53327dca23173e9e9bae9d780786ba78
-
SHA1
1108be5863af8152dce9d7534cd217f44bfa12d3
-
SHA256
93fd2544b315e84b2fd26cca70b84cbdcff3e02cc01b83a7abac2f99d56b19d0
-
SHA512
cda6cc2aad6fac5474c30cd5e38eaec8baed816521c5141538a9401cbe4594a5c980fef943ab5558e90e7dc5f7ec18d9289bcee996d089af505ffdf0504031ed
-
SSDEEP
49152:9vae821/aQWl8P0lSk3aKA3Z+nbnaJBxZzoGdlTHHB72eh2NTke:9vx821/aQWl8P0lSk3DA3Z+nraDpe
Behavioral task
behavioral1
Sample
Bootstrapper.exe
Resource
win7-20240704-en
Malware Config
Extracted
quasar
1.4.1
napalm
napalmwtf-42785.portmap.host:42785
Drownzy-54034.portmap.host:54034
90d42f9c-2535-47cc-9947-9a1a89c43fc4
-
encryption_key
19D2CF4A708769AB5B4B046C13865B4AB48B4C4D
-
install_name
EAC.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
EasyAntiCheat EOS
-
subdirectory
EasyAntiCheat
Targets
-
-
Target
Bootstrapper.exe
-
Size
3.3MB
-
MD5
53327dca23173e9e9bae9d780786ba78
-
SHA1
1108be5863af8152dce9d7534cd217f44bfa12d3
-
SHA256
93fd2544b315e84b2fd26cca70b84cbdcff3e02cc01b83a7abac2f99d56b19d0
-
SHA512
cda6cc2aad6fac5474c30cd5e38eaec8baed816521c5141538a9401cbe4594a5c980fef943ab5558e90e7dc5f7ec18d9289bcee996d089af505ffdf0504031ed
-
SSDEEP
49152:9vae821/aQWl8P0lSk3aKA3Z+nbnaJBxZzoGdlTHHB72eh2NTke:9vx821/aQWl8P0lSk3DA3Z+nraDpe
-
Quasar payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-