Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

27f824a80e...71.exe

windows7-x64

10

27f824a80e...71.exe

windows10-2004-x64

10

2c4115951e...47.exe

windows7-x64

10

2c4115951e...47.exe

windows10-2004-x64

10

500c00d4d7...0a.exe

windows7-x64

1

500c00d4d7...0a.exe

windows10-2004-x64

3

73592f050e...1c.exe

windows7-x64

10

73592f050e...1c.exe

windows10-2004-x64

10

b086986db5...76.exe

windows7-x64

10

b086986db5...76.exe

windows10-2004-x64

10

b99dab26a9...fc.exe

windows7-x64

10

b99dab26a9...fc.exe

windows10-2004-x64

10

c9fc6dc8c8...e6.exe

windows7-x64

10

c9fc6dc8c8...e6.exe

windows10-2004-x64

10

caf5832156...ad.exe

windows7-x64

10

caf5832156...ad.exe

windows10-2004-x64

10

cf18bda81a...a2.exe

windows7-x64

10

cf18bda81a...a2.exe

windows10-2004-x64

10

d1f1126921...3e.exe

windows7-x64

10

d1f1126921...3e.exe

windows10-2004-x64

10

e329eaa5c0...cd.exe

windows7-x64

10

e329eaa5c0...cd.exe

windows10-2004-x64

10

eba45a34e3...0b.exe

windows7-x64

10

eba45a34e3...0b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bluestealer.7z

  • Size

    2.1MB

  • MD5

    8688fa67f01c3a05ea5246ea671fa45d

  • SHA1

    bd3d0167efac90adddce82c10d679069680eeaeb

  • SHA256

    b8a46aa74b7e451ca9ae336258971d7d46334b37c487da00a6039c1d146f6d62

  • SHA512

    2a69e6331730c381d8865d5d36948b632ef010be313526b428b77e6b42f21add9b00a5e19c08631a0b0200e2cc7444eba5e5850dc65decc23f94c6168a4abdb1

  • SSDEEP

    49152:+5tB7WVB/YgSjcZlNt9pqCiLnLqJiJLKjIbHxATTg5IY9L:+53WjZlLoLqJkLZrx4TBYl

Score
10/10
win_update_2023quasar

Malware Config

Extracted

Family

quasar

Version

1.3.0.0

Botnet

Win_Update_2023

C2

butterflybourne.ddns.net:4782

Mutex

QSR_MUTEX_zD2aPCc6Z0MX6eOBsy

Attributes
  • encryption_key

    JzQzojcImiy4nU59S0ns

  • install_name

    custom.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Win_Update_2023

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 10 IoCs
  • AutoIT Executable 9 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • bluestealer.7z
    .7z
  • 27f824a80ebdad6b53d01f487ecb17616c0a2a9d9700ca3be3b1c1a24cdc1f71.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 2c4115951e3a55fe85cf0ebb6fcf5e65ccbebfa0774a3f15db7856b74e8e6647.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 500c00d4d789bb18252fd5f3fe5ce41ae7afc1175dfeb0eb9553636c2c15450a.bin
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • 73592f050eb0d6d8621fed9a739c491029c7975f257a9ceba4c6f2f211c7831c.bin
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections

  • b086986db5990b434fbf33a030d727d4a5316c5cc154ebf0c1b9433833670176.bin
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections

  • b99dab26a9787a8361f75905fa34de2fc05e19f6d5d70bd70f045e0bab05f4fc.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • c9fc6dc8c8dbff7eff9a199440ef52348cf2d410da5d6940d3648d6fa1f568e6.bin
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections

  • caf5832156e063db5f23ccdb510600cefc45d65281d57771f19637daf7f3d7ad.bin
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections

  • cf18bda81a0c95a61a47ece2c1fd879e86e3f1fbd64f3e291fee2d5ca96171a2.bin
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections

  • d1f112692188b7a7cd36cafc7751da401af6d5e6ff73a89ea988c553d00bd93e.bin
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections

  • e329eaa5c013df43ea579571a5ae4d65f8cfd04809aeeb219551c80d6ff42bcd.bin
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections

  • eba45a34e3dfa65dd307af9f5c018bf48aeb4a08fac42ca2899f9334b34e870b.bin
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.