General

  • Target

    Client.exe

  • Size

    3.1MB

  • MD5

    9ea63aac20422806ba510aedcf51664b

  • SHA1

    f66c607805bc1354fde4ce50ad00986d1e9d23be

  • SHA256

    f75b37d10572dfa41b209389de565943a138b1d45852ae9697a4d270da6111df

  • SHA512

    27dfec4178f0e409dc08100d2679edda0ac195a35b61fbb1a5b5740bc80d697cc5eb060f8733636fe464641ee1fe0c5ad8967fb03057e5530cf97e53130c5217

  • SSDEEP

    49152:Znl7+y2FqZaVmN+PqlhU/mevlL1nY1sde0AxUuxG2THHB72eh2NT:Znp+y2FqZaVmN+PqlhU//vlL1Y1sQhx

Score
10/10

Malware Config

Extracted

Family

quasar

Attributes
  • reconnect_delay

    5000

Signatures

  • Quasar family
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections