General
-
Target
211cd98e00387b71c9a8c75649ce6c3ec1c595964abede78960d5d9f233b06bc
-
Size
431KB
-
MD5
cb593528c628b13296746bfd449ab801
-
SHA1
a7de38df3678915f2df0f741dea35a55434c4a26
-
SHA256
211cd98e00387b71c9a8c75649ce6c3ec1c595964abede78960d5d9f233b06bc
-
SHA512
8f584d9ddf9cf0aeb3cf668f0b82416ce09f73f1fa41711fcdac2c9ad7e79f0661983f7e92c61b06bbb0fd1330ececa065278b4735853d0b323aba663b3497fa
-
SSDEEP
6144:BI6bPXhLApfpKcjF36bbGXUM1dz0i205u4S26uI:WmhApnFKKt0i205Yz
Score
10/10
Malware Config
Extracted
Family
quasar
Version
1.3.0.0
Botnet
Test
C2
10.0.2.2:4782:4782
Mutex
QSR_MUTEX_uLG4ZRVYEfBangYb5F
Attributes
-
encryption_key
mcNXfsvLp0Hjh0KA2uyx
-
install_name
Javaupdater.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Java Updater
-
subdirectory
JavaUpdater
Signatures
-
Quasar family
-
Quasar payload 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
211cd98e00387b71c9a8c75649ce6c3ec1c595964abede78960d5d9f233b06bc
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections