Overview

overview

10

Static

static

10

Client-built.exe

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Client-built.exe

  • Size

    3.1MB

  • MD5

    6ce24e7a1a552cf2bb5312453e9d6f2b

  • SHA1

    ece1c2ad510d47b92c71a5d5621232664d046e78

  • SHA256

    e4c44648d9bf079895414fe31e727a3c75dfaca93a06c271f50b61ce49337674

  • SHA512

    81b2baf9d4585f481bcb423b8b578c9e7b9509a6bcaaaaff977d52a550d8a5897b37f944fc327fd5ea74eb214012f0724670172f488c0dbab4d3ece442b31aa3

  • SSDEEP

    49152:SvWI22SsaNYfdPBldt698dBcjHnVRJ6IbR3LoGdLTHHB72eh2NT:Sv722SsaNYfdPBldt6+dBcjHnVRJ6i

Score
10/10
kdotcryptquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

KDOTCrypt

C2

forq.share.zrok.io:7000

Mutex

417ef71d-ad1d-49a7-bc17-ae3b952a30dc

Attributes
  • encryption_key

    92470F4731518ABFA77DC89068544FB7E7B7C459

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client-built.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections