Overview

overview

10

Static

static

10

7d7e29dde2...9N.exe

windows7-x64

10

7d7e29dde2...9N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7d7e29dde2edde3489254aec74a55ce94c93c6636eb6aca26fba7c9c0d1a3cc9N.exe

  • Size

    349KB

  • MD5

    f859adf963e5d8d201ed119bb32a2a40

  • SHA1

    9cf31cc20c2c9bfa41de6e55b818cd026151b24e

  • SHA256

    7d7e29dde2edde3489254aec74a55ce94c93c6636eb6aca26fba7c9c0d1a3cc9

  • SHA512

    156912459855fa626c9822ff5ff2f3ff0bc5a49d80c3f1bc96085379df0818fadb44340253c3ad1bd81057154db1e043cfa59b37350717623455ee2f2428ec1b

  • SSDEEP

    6144:2K2J10qdSlEc39HGGZlMi9MqKQPxjub0n6RKCKSU+yTp0x:2KFXZhMqKQJjDwKjd0x

Score
10/10
proyectoscuuquasar

Malware Config

Extracted

Family

quasar

Version

1.3.0.0

Botnet

ProyectosCUU

C2

192.168.1.198:4782

Mutex

QSR_MUTEX_m5dUI8hKcZccXa2Bjv

Attributes
  • encryption_key

    hjqFnSRNHmM40urcuGMr

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    cles

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7d7e29dde2edde3489254aec74a55ce94c93c6636eb6aca26fba7c9c0d1a3cc9N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections