Overview

overview

10

Static

static

10

dddd.exe

windows7-x64

10

dddd.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dddd.exe

  • Size

    3.1MB

  • MD5

    b51e4c473d3d15369c1045b79902c940

  • SHA1

    ced79de34c62d915f2ff0afffffe5bdf820eb403

  • SHA256

    735a2227cd545d131596f4ea4542e58190bb5bfa9b4df627a00d25b69a2036cb

  • SHA512

    81d969167e313aa03c106ba6f3846d16807e7f418842b2662a5bc207f8c087d7f364bb7ce5fd28b940f1c938793ee71dc9f8291c28320203c6cd1be1aa9d9112

  • SSDEEP

    49152:7vAG42pda6D+/PjlLOlg6yQipVJfxNESENk/iJLoGdpTHHB72eh2NT:7vD42pda6D+/PjlLOlZyQipVVxoZ

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Office04

C2

oct-serious.gl.at.ply.gg:46252

23.84.85.170:3389
Mutex

91e4434c-ab59-4a1a-931f-bd0739545abc

Attributes
  • encryption_key

    043DA72868D75E77D6E7D6B34CDE151E7FD08F30

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dddd.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections