General
Static task
static1
URLScan task
urlscan1
Malware Config
Extracted
Family
quasar
Version
1.4.1
Botnet
DCNuker
C2
172.20.240.1:4782
Mutex
5aef42ba-730f-4fd5-8e38-3b80e5c03c35
Attributes
-
encryption_key
AEF3998DA89E9CAD4DD20B71C925A29DFDCDA383
-
install_name
SecLoaderDecryptor.exe
-
log_directory
CrashDumps
-
reconnect_delay
3000
-
startup_key
Update Checker
-
subdirectory
SubDir
Targets
-
-
Target
https://github.com/Serpentiner4/DiscordNuker/blob/main/DCNuker.exe
-
Quasar family
-
Quasar payload
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-