Overview

overview

10

Static

static

10

updater.exe

windows7-x64

10

updater.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    updater.exe

  • Size

    3.3MB

  • MD5

    247782c8f55790643a8f71e87915f85d

  • SHA1

    610f1c71c85d5a47fa9e7495dbe7131f194670a3

  • SHA256

    22d6bb99b130d4ca4ffd7fdb8e1f2660e4bd70a0713ba7cebd0913be4fcd0056

  • SHA512

    a3b930ed7fb32e7868aee766d2f4e8dad48714df4aed98ac9fa460265f000f4607bb157f196dd85bd907346b342b6f96fa0969e321b88131dc797a25632cc9bd

  • SSDEEP

    98304:6v462XlaSFNWPjljiFXRoUYIr/RJ60Wrv:MwZYSBW

Score
10/10
updaterquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

updater

C2

84.234.19.36:4782

Mutex

bba70724-e63f-429e-a6db-7272aa6f32e1

Attributes
  • encryption_key

    ECC9828BB5C1CB8A0FE0D993AC8183DEA61ACBBC

  • install_name

    updater.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Updater

  • subdirectory

    Update_29012025

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • updater.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections