Overview

overview

10

Static

static

1

b584210f26...16.exe

windows7-x64

1

b584210f26...16.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    b584210f26cf4eadf5593e767c78b916.exe
  • Size 3.5MB
  • Sample231013-freh8agh62
  • SHA256 e1fb148206beb7168a5f92581a51ea32a03d841abf00aff221f35ed03197a59d
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
quasarcashingspywaretrojan

Malware Config

Extracted

Family

  • quasar

Version

  • 1.4.1

Botnet

  • Cashing

C2

  • 185.17.0.246:1419

Mutex

  • e32b7ac6-a9bd-4f6a-a9c2-2187fa77e95c

Attributes
  • encryption_key

    CE9D5068446A3372A70ABE8EBD0D7F0CBC814B08

  • install_name

    svchost.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    svchost

  • subdirectory

    SubDir

Targets

    • Target
      b584210f26cf4eadf5593e767c78b916.exe
    • Size 3.5MB
    • SHA256 e1fb148206beb7168a5f92581a51ea32a03d841abf00aff221f35ed03197a59d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    quasarcashingspywaretrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks