Overview

overview

10

Static

static

10

WaveCracked.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    WaveCracked.exe

  • Size

    3.1MB

  • MD5

    ce04b8d05bae95c6581d64e64cb99ace

  • SHA1

    4dc291b14fe660a7d10a189ec6682ea294b3ceb8

  • SHA256

    d5dc8f94bbfbb4502faca361947ee314a1832976318cb2b42c5ec7cb62e62a2a

  • SHA512

    af9e871f607237d8a2f4f3010ce83767d74a4a74379183d41b39a64cf35305e8994db9333806eb373ef2811e0e489074c7d264ee0f26607b1db69172fe254050

  • SSDEEP

    49152:3vXI22SsaNYfdPBldt698dBcjHZoSj1J/EoGdvTHHB72eh2NT:3vY22SsaNYfdPBldt6+dBcjHZoSA

Score
10/10
the-clientquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

The-Client

C2

90.205.250.175:4782

Mutex

987c858e-193d-4f94-a00f-93d9766de19a

Attributes
  • encryption_key

    24738DA3B74468EE700E0A2A08D3257814F81A32

  • install_name

    WaveCracked.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Windows runtime Process

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WaveCracked.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections