Overview

overview

10

Static

static

10

Virus.exe

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Virus.exe

  • Size

    348KB

  • MD5

    325f748d4e40fd993021c4a39e60384d

  • SHA1

    665c5980233d2081ecb638a5601950da52aec632

  • SHA256

    f3d4f0a9c0f837998e9ac15b067a74fa15cea74db186e1067fd55eea657ae3f3

  • SHA512

    5dfadcb320f93d8990e70f219cb6ecfeb0e8dc0bb90e3dbdbe4977e0ce8b029a1aeab91f272476f1dbab16191be287d072d8cfedd550893c9bdde268b1e02f95

  • SSDEEP

    6144:s16bPXhLApfp07Dbj82MGlfCtfb5vJtTamdYxM4HX2vuJrq:QmhApSPeFKmd4rHXXrq

Score
10/10
hackeado papuquasar

Malware Config

Extracted

Family

quasar

Version

1.3.0.0

Botnet

hackeado papu

C2

dbxs31c.localto.net:5853

Mutex

QSR_MUTEX_Da9VX0BUJqFSTadPhi

Attributes
  • encryption_key

    jmEyWTm6K6eGLE8Q3C6X

  • install_name

    Windows.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Windows

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Virus.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections