Overview

overview

10

Static

static

10

Bootstrapper.exe

windows7-x64

10

Bootstrapper.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Bootstrapper.exe

  • Size

    3.3MB

  • MD5

    53327dca23173e9e9bae9d780786ba78

  • SHA1

    1108be5863af8152dce9d7534cd217f44bfa12d3

  • SHA256

    93fd2544b315e84b2fd26cca70b84cbdcff3e02cc01b83a7abac2f99d56b19d0

  • SHA512

    cda6cc2aad6fac5474c30cd5e38eaec8baed816521c5141538a9401cbe4594a5c980fef943ab5558e90e7dc5f7ec18d9289bcee996d089af505ffdf0504031ed

  • SSDEEP

    49152:9vae821/aQWl8P0lSk3aKA3Z+nbnaJBxZzoGdlTHHB72eh2NTke:9vx821/aQWl8P0lSk3DA3Z+nraDpe

Score
10/10
napalmquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

napalm

C2

napalmwtf-42785.portmap.host:42785

Drownzy-54034.portmap.host:54034
Mutex

90d42f9c-2535-47cc-9947-9a1a89c43fc4

Attributes
  • encryption_key

    19D2CF4A708769AB5B4B046C13865B4AB48B4C4D

  • install_name

    EAC.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    EasyAntiCheat EOS

  • subdirectory

    EasyAntiCheat

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Bootstrapper.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections