Overview

overview

10

Static

static

10

d7da5855f3...1N.exe

windows7-x64

10

d7da5855f3...1N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d7da5855f33f59652367ba301797517eed7a67fe4c42baa9ab872e734d4ee051N.exe

  • Size

    3.1MB

  • Sample

    250125-svmp8aymbw

  • MD5

    a8f53c5cb023817acf7e9828748416f0

  • SHA1

    f944bcc0154b40d75fb4d08817e7d3c539582914

  • SHA256

    d7da5855f33f59652367ba301797517eed7a67fe4c42baa9ab872e734d4ee051

  • SHA512

    a3a71e33537faf2009c0b0273e44e67383a362c60770c6752d2522bbce2a291e77cb17ea59fbfac00c75daab0abbeebb5eed161c9506a92298fa955318c3c2e4

  • SSDEEP

    49152:PvbI22SsaNYfdPBldt698dBcjHeIIjhZFoGdvJZTHHB72eh2NT:Pvk22SsaNYfdPBldt6+dBcjHeIS/

Score
10/10
quasarblackhatspywaretrojan

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

blackhat

C2

blackhattr.ddnsfree.com:4782

Mutex

ae8339a7-3385-49fb-9163-5491d3ba7727

Attributes
  • encryption_key

    82CD386E2BDAC124642E3EFA99734071C9C7F79C

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Targets

    • Target

      d7da5855f33f59652367ba301797517eed7a67fe4c42baa9ab872e734d4ee051N.exe

    • Size

      3.1MB

    • MD5

      a8f53c5cb023817acf7e9828748416f0

    • SHA1

      f944bcc0154b40d75fb4d08817e7d3c539582914

    • SHA256

      d7da5855f33f59652367ba301797517eed7a67fe4c42baa9ab872e734d4ee051

    • SHA512

      a3a71e33537faf2009c0b0273e44e67383a362c60770c6752d2522bbce2a291e77cb17ea59fbfac00c75daab0abbeebb5eed161c9506a92298fa955318c3c2e4

    • SSDEEP

      49152:PvbI22SsaNYfdPBldt698dBcjHeIIjhZFoGdvJZTHHB72eh2NT:Pvk22SsaNYfdPBldt6+dBcjHeIS/

    Score
    10/10
    quasarblackhatspywaretrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks