General
-
Target
https://www.upload.ee/files/17702380/mcfagen.exe.html
-
Sample
250204-w4azkawmdw
Score
10/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.upload.ee/files/17702380/mcfagen.exe.html
Resource
win10v2004-20241007-en
18 signatures
300 seconds
Malware Config
Extracted
Family
quasar
Version
1.4.1
Botnet
HackerByzirush
C2
zirushsteal-25920.portmap.host:25920
Mutex
5029194a-e2b0-40e0-bea4-e32dfb20fe2f
Attributes
-
encryption_key
63D5EE78802387EC7D9459CA55CA6501BC97FFEE
-
install_name
MicrosoftSecurity.exe
-
log_directory
Logs
-
reconnect_delay
2000
-
startup_key
MicrosoftSecurity
-
subdirectory
MicrosoftSecurity
Targets
-
-
Target
https://www.upload.ee/files/17702380/mcfagen.exe.html
Score10/10-
Quasar family
-
Quasar payload
-
Executes dropped EXE
-
Drops file in System32 directory
-