Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

fdb43a2f99...01.exe

windows7-x64

10

fdb43a2f99...01.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fdb43a2f99ffb4ac9cd2a2a0eeffa531de224b45f4b8cce0bd700a89f1f54e01.exe

  • Size

    3.1MB

  • MD5

    3c8875bb8a38b7b3a8ae874e24461da5

  • SHA1

    c2cbcf60e8c3639ec777fbdd614c97a5ae854117

  • SHA256

    fdb43a2f99ffb4ac9cd2a2a0eeffa531de224b45f4b8cce0bd700a89f1f54e01

  • SHA512

    23c8975c12f5d88bbb3845b0154f3bb3ea4e24bdc98f571a3ecb61cfbbc0aa25cbbb0176d2ab990c811c1d15ff7ba1fb92a185bad2c52114e7d0fdf721009f53

  • SSDEEP

    49152:6vUt62XlaSFNWPjljiFa2RoUYIVa6uEBDik/SZoGd8THHB72eh2NT:6vI62XlaSFNWPjljiFXRoUYIVa6q

Score
10/10
kysquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

kys

C2

192.168.100.2:4444

Mutex

87964754-44e1-4ed3-a66e-f8de30cfe006

Attributes
  • encryption_key

    6B74F0C858B7E90573D4E97997F2A082B9781250

  • install_name

    Panel.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Panel

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fdb43a2f99ffb4ac9cd2a2a0eeffa531de224b45f4b8cce0bd700a89f1f54e01.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.