Overview

overview

10

Static

static

10

GalaxyOptimizer.exe

windows7-x64

10

GalaxyOptimizer.exe

windows10-2004-x64

10

Resubmissions

29/09/2024, 14:18

240929-rmmjtaxerj 10

29/09/2024, 14:13

240929-rjxkls1bnf 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    GalaxyOptimizer.exe

  • Size

    3.1MB

  • MD5

    68a879b8525cec44fb6d37e7b4ef53af

  • SHA1

    9bd2a0db098ab9156a5ffb2684f7efecca20f84e

  • SHA256

    b03b34d43257ee108d4c04d826a0068349e9dab5e544ea74ef520fa6238f2a3a

  • SHA512

    b2f838727886395bab5dd2e88bece000ce9ace68ad02642e5d4e77032ed3ed48401ab7ce794b5e88bc861fa66059beabdabaf12dcfb46b88f4e68d8375e9be36

  • SSDEEP

    49152:3vSI22SsaNYfdPBldt698dBcjH8Bhm4+YvJHEoGdTTHHB72eh2NT:3v/22SsaNYfdPBldt6+dBcjHy+9

Score
10/10
dummy 1quasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Dummy 1

C2

192.168.1.153:5372

Mutex

80ca7863-a075-45f2-8d18-c2f58d2f113a

Attributes
  • encryption_key

    4390F2ADFFDBDE200EC5AEC1BC24C28ABB3A44AA

  • install_name

    GalaxyOptimizer.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    ‽

  • subdirectory

    GalaxyOptimizer

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • GalaxyOptimizer.exe
    .exe windows:4 windows x86 arch:x86

    Password: Imperial

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections