quasar | Apex V2[.]zip

resource	yara_rule
static1/unpack001/Apex V2/Apex [Trial ].exe	family_quasar

resource
unpack001/Apex V2/Apex [Trial ].exe

Apex V2.zip

SHA256 c56f4cb4043693f0fa37cdbf17cb7a65dc3d8e1bf97d18b0884765f55a062d07
MD5 6196c2cb259b85afff7e1a598892ebe6
SHA1 dfe4bfed624a13ae6ee63176b592621b88ab0db2
SHA512 e4182a354fd4fd12a2011e74f57cae7d379ecccf161009d27b9b57a7795a8694ed3931e2fc75ae9d51de403e71dddd7cc17e89b29d45e1a5b2153350f23ce7c4
SSDEEP 49152:xvBt62XlaSFNWPjljiFa2RoUYIOs1DPdaMELopdxiTHHB72eh2NTs:xvr62XlaSFNWPjljiFXRoUYIN9PWL
TLSH
T1DCE54A0437F85E23E1ABE37395B0041367F1FC5AB3A3EB0B6591677A5C53B504882AA7
MD5 SHA1 SHA512 SSDEEP TLSH

Apex V2/.gitattributes

SHA256 dcc4e04a9952ff446b9d78c624d80379b0f20f5817a89b9b2b1ab8b55b82fd52
MD5 c4f364b364a2ac980a1dbf9d9a73a0e1
SHA1 082442a106c29adb09669f321f984c1bf606f780
SHA512 0636a9f3c5f8d3ef061ce2271e615457b0a3b0466eace59671c696b4a81b0cc12bcb233747cfc04a6b22beb09e21798996fb4ccb3a5376b520af01c941153c84
TLSH
T162F0F8EC6F503ABD528313092CC759056CF0834E2668BA74160BCC1CB2C2343E48D679
MD5 SHA1 SHA512 TLSH

Apex V2/.gitignore

SHA256 f0ac563d4642aa2d338e2bb3500cc09197b3cf9f02a68f16e4ec83b35dacda68
MD5 b0f929cbe3638ae0c501412e9a919a94
SHA1 2643be3241c67e09e78da50977d34304defcdbbf
SHA512 26c6cce8ef329b68171eace37a4fb8be290959eda278cce2376d64f426d6ff74be696ee059bed7acb0ae0613c7c15a4de2b90ab7dde5a1cdd7aaa3551ee565ba
TLSH
T10D51B6EC466C937B96C110CCE1FAB804E66D938913F653F0849D91897352F4461BF5BA
MD5 SHA1 SHA512 TLSH

Apex V2/Apex [Trial ].exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 d77586e4b9c20b8185aa2f4cfc9fcc90b370071fd7aad3698755776c9fb0e002
MD5 8bc30594ae5a3668403aab726652e613
SHA1 056c2af2047ea8ae84599bf99577c0e52c8fe44f
SHA512 cad89e7629f2ea368aa382ddd75a2e0026d8dd9d16ba34266324470d3ea4461255a66e60d82a974fd7abdc39f4d8a532b9875505935ff72f7630a365f8056e9e
SSDEEP 49152:6vBt62XlaSFNWPjljiFa2RoUYIOs1DPdaMELopdxiTHHB72eh2NT:6vr62XlaSFNWPjljiFXRoUYIN9PW
TLSH
T1F5E54A0437F85E23E1ABE37395B0041367F1FC5AB3A3EB0B6591677A5C53B504882AA7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Quasar payload
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

3269582

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Apex V2/Readme.txt

SHA256 fb0200dad66256c600830d4cdae8a7442504b99ebd97215776d06ef3695a7c66
MD5 e055368b55176394ab60384dd6945356
SHA1 a1cb45af101286153da7e94e6b78babe79f322d4
SHA512 ae2d2312918df65b97397a8e29a077c9ed725adb3144959206e8f048f2a9f772926f7a5225e21421a5c91eb848de287d271f7bc0a23a52e172755db76aea36fd
TLSH
T103B02B0C6DD00B3378981C00491CD47AF70C43E6C39845C0115805C10D202581235EFC
MD5 SHA1 SHA512 TLSH

Apex V2/appveyor.yml

SHA256 dc2f3976836f8e5fe2550fd977c778eee1e4488afaa0b281b2ce81be8b0fd77b
MD5 02e951df7b8dd1eedeb301f5db336117
SHA1 9b3546fd74a4bb168b1b91116a464e28d5bd2620
SHA512 ae36f34243b3d357649fb90dbe61738450f21c2c91a0a47d063cd378ac273dd6f6fba2831b89a350d26185e294a12e0ae23d7ae708781067135895ef110e0b1a
TLSH
T173D05E34D909B837EB5592CBE1D17706D73C46B01B971A39D0AE632061073968621002
MD5 SHA1 SHA512 TLSH

Apex V2.zip

Apex V2/.gitattributes

Apex V2/.gitignore

Apex V2/Apex [Trial ].exe

mscoree

dotnet

Apex V2/Readme.txt

Apex V2/appveyor.yml

Sharing

General

Malware Config

Extracted

Signatures

File Explorer

Apex V2.zip

Apex V2/.gitattributes

Apex V2/.gitignore

Apex V2/Apex [Trial ].exe

mscoree

dotnet

Apex V2/Readme.txt

Apex V2/appveyor.yml