Overview

overview

10

Static

static

10

niggarab.exe

windows7-x64

10

niggarab.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    niggarab.exe

  • Size

    3.1MB

  • MD5

    448ec0f3a024768ba82ca362ac35e54f

  • SHA1

    6b0f1d6976283f31ce29c83ce5bc2f5bc2e94a49

  • SHA256

    1d540999c78833cce0176eef65096caf459d4cd56472c068ce728868653aac8f

  • SHA512

    cbb7fc6143e59c3b376dee87435ae19c987f130926e01d0c8ddf6ce303488047697f35ad3d26d0f55a0894a74271fb9b52beb859959e05f5709dbde75eb8aae7

  • SSDEEP

    49152:Xv7cfX2hcawDEhPLl8r/ptXpga584Qx9E1zxk/Jx6oGdRTHHB72eh2NT:Xvwv2hcawDEhPLl8r/XXpga584Qx3U

Score
10/10
jaffacakes лох, сдохнет от спида!!! i hate niggersquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

JaffaCakes лох, сдохнет от спида!!! I hate Niggers

C2

rab1.premium-televizor.net:18651

Mutex

af92703d-a16f-40c6-8fff-b3793fd59f85

Attributes
  • encryption_key

    0F1B05653C3B3AB3BB4ECD772DD024668CBE8DF1

  • install_name

    system32.exe

  • log_directory

    Keyboard

  • reconnect_delay

    3000

  • startup_key

    Trusted Installer

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • niggarab.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections