Overview

overview

10

Static

static

10

2d4119d56e...0N.exe

windows7-x64

10

2d4119d56e...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2d4119d56ebd7b3c7feaac3ab87f71c0N

  • Size

    3.1MB

  • MD5

    2d4119d56ebd7b3c7feaac3ab87f71c0

  • SHA1

    75cb636442f75f440ff744607cf0c88060291e01

  • SHA256

    17c034045f23f7a964f3b3723035b7765f88f41ee78929ea9859c8375b73989b

  • SHA512

    5eabac753d23ab38ee4eab5466f71c5e175f4896a01ad7c39c487b3b344498996e37b2f4625f06d810779c47e57405c70e6c11bdbab4907495fe6f648e7c9efd

  • SSDEEP

    49152:uvDY52fyaSZOrPWluWBuGG5g5hu/FAnqvjTLojdusTHHB72eh2NT:uvE52fyaSZOrPWluWBDG5g5hxnG

Score
10/10
nexia crypterquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Nexia Crypter

C2

127.0.0.1:4782

Mutex

ebdac084-eef1-4b7d-937e-294e7d456187

Attributes
  • encryption_key

    504129CE390681D21BF2BA5F4C79A852DD7A0B77

  • install_name

    Client.exe

  • log_directory

    Datos!

  • reconnect_delay

    3000

  • startup_key

    Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2d4119d56ebd7b3c7feaac3ab87f71c0N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections