Static

static

10

Resubmissions

03/10/2024, 10:06

241003-l5ghmawgqk 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Client-built.exe

  • Size

    3.1MB

  • MD5

    b382cc9bd6743631d202ee9388196981

  • SHA1

    ada683921b83da1066f4c20d2b20731d529c873f

  • SHA256

    5101cb04c38770287a16423f43e9ce5fdd8aa8511f4b0f464df1f3fcc9bb0a80

  • SHA512

    165f09922121dceffbf6af969038bc6a320a3a7dc7ba95f8369a23a43f905c885942b0ad707c98ade09da9a6ca479e4d3fe1e859bcc8c94c11d95f59bb4a98d1

  • SSDEEP

    49152:mvht62XlaSFNWPjljiFa2RoUYIFkxT1v1LoGQPTHHB72eh2NT:mvL62XlaSFNWPjljiFXRoUYIFkxH

Score
10/10
testquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Test

C2

127.0.0.1:4782

Mutex

bd6c3b1d-6aa7-4e42-9f88-ac99d54904d9

Attributes
  • encryption_key

    63667F73F7CDD8FC0A2474F0D1CB5D2D071D6D70

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SystemFile

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client-built.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections