Overview

overview

10

Static

static

10

eclipse executor.exe

windows7-x64

10

eclipse executor.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eclipse executor.exe

  • Size

    3.1MB

  • MD5

    9d918d732629fc36b8230dc336f1f8af

  • SHA1

    50297e276fde5a6f9ccd115de12dbba9d3893e92

  • SHA256

    981f2a7171d95727552a99245694f1283bc1188ec09d3946fb075c3fe1b0a2ce

  • SHA512

    4898b309c1df3f79e2d026be2e19406d384b88d6b526957c253087007d01a23b3f40f1c375f1be5eee5f05121d361e82fe4c66845bc02b9aa6727cf820259b05

  • SSDEEP

    49152:SvvI22SsaNYfdPBldt698dBcjH2j5VbR4jLoGdMITHHB72eh2NT:Svg22SsaNYfdPBldt6+dBcjH2j5Mv

Score
10/10
madequasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

made

C2

2001:569:7e70:6a00:c8f3:749c:278f:2c17:4782

Mutex

9d96368e-1352-46e3-8281-8f5eaf945edb

Attributes
  • encryption_key

    AF603C3CFA231D1BD841E315C27377C7E4A49333

  • install_name

    client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Java startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eclipse executor.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections