General
-
Target
cbbf746f0b8dd266ac933cb4e073b505721d5369c290e4a137a357281aea8d56
-
Size
3.1MB
-
MD5
2a036b0dd26406304870e4a5a5317720
-
SHA1
94801f96cb2dc6f0c4b236dd01d8c1c118670add
-
SHA256
cbbf746f0b8dd266ac933cb4e073b505721d5369c290e4a137a357281aea8d56
-
SHA512
bc64ff4d7658d0223ff1f1291de72d051be6790487471219a28bf3199616dc3f9fbb576d6c06b146db7b3f20700339cd0650f5cc751e123d4c1535c8f6bcbbb0
-
SSDEEP
49152:6vrI22SsaNYfdPBldt698dBcjH5CE1JqLoGdPGOTHHB72eh2NT:6vU22SsaNYfdPBldt6+dBcjH5Cf+
Score
10/10
Malware Config
Extracted
Family
quasar
Version
1.4.1
Botnet
Quasar
C2
192.168.1.56:4782
192.168.1.1:4782
Mutex
5fe19de3-1a9f-412b-a448-7cecf7917fc4
Attributes
-
encryption_key
2055CC40613B58490E3F6E74C60505765A925EAB
-
install_name
Quasar.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Settings
-
subdirectory
SubDir
Signatures
-
Quasar family
-
Quasar payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
cbbf746f0b8dd266ac933cb4e073b505721d5369c290e4a137a357281aea8d56
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections