General

  • Target

    Client-built.exe

  • Size

    1.5MB

  • MD5

    efdf48328fd93af977682db2ac7b56ce

  • SHA1

    006abc06af3cdc20dd52588beb5ce4f13273f2db

  • SHA256

    dd1ff957df241c8301de5be805cbe9c484a9d3768e657afffc83a0697f881674

  • SHA512

    30f723977dd6006954f6fc19c23abf421c11a00845ba9dbbd9a465ce6c7a023f96bc641023a1833605cc0306d1e4a7371cee7e2f31bb755d02c25f548949f8d3

  • SSDEEP

    24576:uU1R7bTS2eWBRwRR16zhHIPbcNK0KKm77yviUSQaZaOwI55l2S62r9exnXWiA1Qx:uqRR7wR2EgKKm77LrwCB6T+1Q

Score
10/10

Malware Config

Extracted

Family

quasar

Attributes
  • encryption_key

    1FB7485171FF20CDA99F01C1B832D8813FC1E606

  • reconnect_delay

    3000

  • startup_key

    �&)M-Im�� c�hp����C��.��

Signatures

  • Quasar family
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client-built.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections