Overview

overview

10

Static

static

1

687c5903af...28.exe

windows7-x64

10

687c5903af...28.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    687c5903af67e7ae2df617f249ef22502998e4524ccb34a27eaac389b8e61728.exe

  • Size

    4.8MB

  • Sample

    241219-nl53zssmfx

  • MD5

    9a7cea63db91937ec2fa0c4a40dcde82

  • SHA1

    dbc121740eb6aa3221beadd3ae69df1ce095c441

  • SHA256

    687c5903af67e7ae2df617f249ef22502998e4524ccb34a27eaac389b8e61728

  • SHA512

    36e6a806125b1d80e97482f0b03a7481a136f01d2808169f171d89c54d2faf6f5b6913f4751dc737d5dc672f63622e379fd87f306cec2e076d8a5e73d33059dd

  • SSDEEP

    98304:nMuUyniWYpCYL5ztUvPPpmDw7FhcNXIvNS12RA4:njifpTptUvpWw7FmNXENSV4

Score
10/10
quasarstakingspywaretrojan

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Staking

C2

51.15.17.193:4782

Mutex

ff4f56ac-24e1-40ed-bb5c-e0b45b489ee4

Attributes
  • encryption_key

    97599F6E5D14A784CC4DD36B18A277119042FDA8

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Targets

    • Target

      687c5903af67e7ae2df617f249ef22502998e4524ccb34a27eaac389b8e61728.exe

    • Size

      4.8MB

    • MD5

      9a7cea63db91937ec2fa0c4a40dcde82

    • SHA1

      dbc121740eb6aa3221beadd3ae69df1ce095c441

    • SHA256

      687c5903af67e7ae2df617f249ef22502998e4524ccb34a27eaac389b8e61728

    • SHA512

      36e6a806125b1d80e97482f0b03a7481a136f01d2808169f171d89c54d2faf6f5b6913f4751dc737d5dc672f63622e379fd87f306cec2e076d8a5e73d33059dd

    • SSDEEP

      98304:nMuUyniWYpCYL5ztUvPPpmDw7FhcNXIvNS12RA4:njifpTptUvpWw7FmNXENSV4

    Score
    10/10
    quasarstakingspywaretrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks