Overview

overview

10

Static

static

10

d62ca6b35f...82.exe

windows11-21h2-x64

10

Resubmissions

13-10-2024 18:50

241013-xg1gdascje 10

13-10-2024 18:43

241013-xc6slawflq 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d62ca6b35f3b5c4bdd55797a09e50fc29a017deaed82706ecc5606aec87ec782.exe

  • Size

    3.1MB

  • MD5

    39c406e057150c0665384af7e6aae113

  • SHA1

    19c2f4e3b31a0ef74a707ea6296c738daec25528

  • SHA256

    d62ca6b35f3b5c4bdd55797a09e50fc29a017deaed82706ecc5606aec87ec782

  • SHA512

    68f1c15462f6b09f7363a5060f87e78a4c1aaca79f179f75b9162cdbd0f667fff7e76bcdda7ce8eb58aad7322f61c32f5a9e6f236ca1061cde21da0bbca213d2

  • SSDEEP

    49152:xvBt62XlaSFNWPjljiFa2RoUYI6udSERp7vJjWoGdktTHHB72eh2NT:xvr62XlaSFNWPjljiFXRoUYINBpI

Score
10/10
fadequasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

fade

C2

51.79.73.224:5555

Mutex

b922fbd2-9ed7-4052-822a-bf76930085b8

Attributes
  • encryption_key

    C63A0249CF6F8B4A93041A164B828BB37886B3D4

  • install_name

    Fade.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Fade client

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d62ca6b35f3b5c4bdd55797a09e50fc29a017deaed82706ecc5606aec87ec782.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections