General
-
Target
Client-built.exe
-
Size
3.3MB
-
Sample
240701-agxn6azepa
-
MD5
d5228d8272c425d9aa1af3a1ab93d9fd
-
SHA1
f88b9a56ed8377a277a8a6b7b09d01779824fae8
-
SHA256
f1512bfeff65f189db2ba206fe9b51764b67e60526c3d1c0482feff63a4fa95b
-
SHA512
d92d45cc8ac140e7581d743a365e2a943a983e83195f5e363ebf72ab7ba98a772099103bdb2909728cd65e4262d5505e55e795b1a00bdfb9c8d9df9c852e8741
-
SSDEEP
49152:0v8go2QSaNpzyPllgamb0CZof/JZXxNESEuk/iWLoGdqITHHB72eh2NT:0vNo2QSaNpzyPllgamYCZof/JBxdY6
Malware Config
Extracted
quasar
1.4.1
FajnyGosc
none-vocals.gl.at.ply.gg:47745
none-vocals.gl.at.ply.gg:2137
147.185.221.17:2137
147.185.221.17:47745
a43b504c-d3c0-453a-96d2-1e0097cafb65
-
encryption_key
AD8872181A3CA4A71BFAE37CA853D97218D094EE
-
install_name
NewCheats.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Miicrosoft Security
-
subdirectory
Miicrosoft Security
Targets
-
-
Target
Client-built.exe
-
Size
3.3MB
-
MD5
d5228d8272c425d9aa1af3a1ab93d9fd
-
SHA1
f88b9a56ed8377a277a8a6b7b09d01779824fae8
-
SHA256
f1512bfeff65f189db2ba206fe9b51764b67e60526c3d1c0482feff63a4fa95b
-
SHA512
d92d45cc8ac140e7581d743a365e2a943a983e83195f5e363ebf72ab7ba98a772099103bdb2909728cd65e4262d5505e55e795b1a00bdfb9c8d9df9c852e8741
-
SSDEEP
49152:0v8go2QSaNpzyPllgamb0CZof/JZXxNESEuk/iWLoGdqITHHB72eh2NT:0vNo2QSaNpzyPllgamYCZof/JBxdY6
-
Quasar payload
-
Executes dropped EXE
-