Overview

overview

10

Static

static

10

eclipse executor.exe

windows7-x64

10

eclipse executor.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eclipse executor.exe

  • Size

    3.1MB

  • Sample

    250126-hjce1avmgv

  • MD5

    9d918d732629fc36b8230dc336f1f8af

  • SHA1

    50297e276fde5a6f9ccd115de12dbba9d3893e92

  • SHA256

    981f2a7171d95727552a99245694f1283bc1188ec09d3946fb075c3fe1b0a2ce

  • SHA512

    4898b309c1df3f79e2d026be2e19406d384b88d6b526957c253087007d01a23b3f40f1c375f1be5eee5f05121d361e82fe4c66845bc02b9aa6727cf820259b05

  • SSDEEP

    49152:SvvI22SsaNYfdPBldt698dBcjH2j5VbR4jLoGdMITHHB72eh2NT:Svg22SsaNYfdPBldt6+dBcjH2j5Mv

Score
10/10
quasarmadespywaretrojan

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

made

C2

2001:569:7e70:6a00:c8f3:749c:278f:2c17:4782

Mutex

9d96368e-1352-46e3-8281-8f5eaf945edb

Attributes
  • encryption_key

    AF603C3CFA231D1BD841E315C27377C7E4A49333

  • install_name

    client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Java startup

  • subdirectory

    SubDir

Targets

    • Target

      eclipse executor.exe

    • Size

      3.1MB

    • MD5

      9d918d732629fc36b8230dc336f1f8af

    • SHA1

      50297e276fde5a6f9ccd115de12dbba9d3893e92

    • SHA256

      981f2a7171d95727552a99245694f1283bc1188ec09d3946fb075c3fe1b0a2ce

    • SHA512

      4898b309c1df3f79e2d026be2e19406d384b88d6b526957c253087007d01a23b3f40f1c375f1be5eee5f05121d361e82fe4c66845bc02b9aa6727cf820259b05

    • SSDEEP

      49152:SvvI22SsaNYfdPBldt698dBcjH2j5VbR4jLoGdMITHHB72eh2NT:Svg22SsaNYfdPBldt6+dBcjH2j5Mv

    Score
    10/10
    quasarmadespywaretrojan

    • Quasar RAT

      Quasar is an open source Remote Access Tool.

      trojanspywarequasar

    • Quasar family

      quasar

    • Quasar payload

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks