5f8321c55d3ffcf56105303b96299ce6

PE Executable
|
MD5: 5f8321c55d3ffcf56105303b96299ce6
|
Size: 3.28 MB
|
application/x-dosexec

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	5f8321c55d3ffcf56105303b96299ce6
Sha1	96d13c4a42644159a851ff7cd65dbda30a30c07b
Sha256	4c1cc0aa49edbc0a2cccd62d28a01cf22c22ab7b3aef79fbb3ef22f7536dd645
Sha384	f29a1d1c51850f0f0770196befdaec0e7426a3c9668908d41ba2e2354bb6efcf12ccfb4f6008666fe508f11cb3d0d56b
Sha512	2c155025e6b5a9c1428d56e5ebbd79b7a9b4bbb5f91d1011bb792ae9aaafc7f0df7f4ab2fd9e0fd82476a0f7f0f2a34aeeeed4179f2b80f93a20bb643d29cc0e
SSDeep	49152:VvYg62iAa8rBmPxl0XxlttPamaBV/662ugvJL1oGd2THHB72eh2NTw:Vvp62iAa8rBmPxl0XxvtPamaLaucY
TLSH	9FE55A143BF85E32E16BE6B2D5B0501663F1F82AF363EB1B6181677E1C93B405C416AB

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Malware Configuration - QuasarRAT config.

Config. Field0	Value
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	443
Host	au88-top.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	443
Host	mqdfpy.sa.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	443
Host	vn-au88.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	443
Host	consultrade.uk.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	443
Host	au88kitty.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	443
Host	uotahi.za.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	443
Host	erogen.ru.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	443
Host	au88-binb.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	443
Host	au88.it.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	443
Host	au88vietnam.pro
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	443
Host	testseriesbymadhavi.in.net
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	www.au88-top.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	www.mqdfpy.sa.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	www.vn-au88.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	www.consultrade.uk.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	www.au88kitty.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	www.uotahi.za.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	www.erogen.ru.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	www.au88-binb.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	www.au88.it.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	www.au88vietnam.pro
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	www.testseriesbymadhavi.in.net
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	au88-top.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	mqdfpy.sa.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	vn-au88.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	consultrade.uk.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	au88kitty.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	uotahi.za.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	erogen.ru.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	au88-binb.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	au88.it.com
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Conf. AES-Salt	BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41
Port	4782
Host	au88vietnam.pro
Conf. AES-Key	82F394B4927CC3A00727B49E79BD445CA70FCFB2
Version	1.4.1
Port	4782
Host	testseriesbymadhavi.in.net
ReconnectDelay	3000
SubDirectory	Anti
InstallName	WagerShieldAnti-Fraud.exe
Install	1
Startup	1
Mutex	05758875-7806-4ed6-a311-ef47ce260b82
StartupKey	WagerShield Anti-Fraud Client Startup
HideFile	1
EnableLogger	1
Tag	WagerShield_1
LogDirectory	Logs
ServerSignature	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
ServerCertificate	MIIE9DCCAtygAwIBAgIQALpmuy0cmWc/6HQ0xJDqVzANBgkqhkiG9w0BAQ0FADAbMRkwFwYDVQQDDBBRdWFzYXIgU2VydmVyIENBMCAXDTI2MDEyMjIxMzM1NVoYDzk5OTkxMjMxMjM1OTU5WjAbMRkwFwYDVQQDDBBRdWFzYXIgU2VydmVyIENBMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsLG835ZmdPKrQdugxjx1lYawHh6aR86omvz937FIs34JbdruYOk4oKj05X9AjIJHJ66p0fN/mfMFg28ujhYwg+IC3HK8c8BexxqVU7/NwEv+CdBvPdqxK0oc4VSAs2N24fZ2ZNQ6x9snH1P0GL2IDcHG790wF79m37h/HiWUXzfSu/PDSyGWNpq6GeZKziRn/fAVH3iPXKqBqlHUo4YyRvany3WYadq83BfEw2CZqRSSbetEDCc0ApK2jMNVQA1BG7J7MbkWtKMritKxTqHI4hxhPlWew7qAMpKItgqsE2NnG0TWci1XNCCbQerHXAdI8/S4uBnvzvQlLxMyOc0Tx86XOizFl0zid1T6gnQJvKh2ZAbRl3wK8BrNY+LR7CT3RdV8wQyuSwTWJyn1uNY5S0rFu2kf6XLgqcsTZZ7WHcIhO0RiFjf7M/9ajY4QVviwns2jcTevI9QE/yKdLlLNkm4euO4wPGyHZUeapaQZY01STc8zgtKdSABcG0yXs8pp9VGWwBwHAYJymAPTQl2mFQX54Mc9HrUMYxebieKNtuHdovQwFMIKFYjpSwy6kZ/y9wys6xuKGkzI9VKVUMYT8DA1VzWtO7pV/r5A5SBj6NVvReHHVdeTymupzWMoQjFv4JmegrmR9xnhUEA5BJ99vTuRYdmn+hcCaMwjpDgSr3sCAwEAAaMyMDAwHQYDVR0OBBYEFCNoryvn36PO+JwOl8YZ3epR3koWMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQENBQADggIBAJpCnn1sjdgSDrkQELaGy6Eh98dtpevYHDU4UekvqPxXJw6BnYmdjDQ5Et5ZAIom9W9uv+WTar96dmcmj9ibTr69/SCZoenBMu8A3W0RkLzYXJuCa3QwkqksZmdID/A55A2t69Ve4IBlixlrRA4X9TLPS+yHFpM4zw7ihyw3xKUbzf/YQPffiwPQrCCWFLCnJP4Bhip6/gI2gTPRhZnIINk90DLPmF+y36/ABG9yaGo/iOxMYg9CbU5ZhN/XACzCSOVWx0478S1fS0TEF4yxuCYFVbhWpL4PvMFLw3P9tSSFsq2fUCaZmrlq3uV7pmWhVS7krxdPrKcvYQJQ/LWB2TbuuEPCeb/Z3gjQkUdabSs8G7HwFLSuNP0U6xsOfI13/zPMLVeBhECK3t7tRFSoWAULvAl+aTFkVR5j/cwFFg1DhJsP/UMPsK2zHsqMHxiP7D1ZAmRbUEAMMj+KxUnAFg2/Fn7Bj4vpwx5VmLpWeOE+UWq9cTFw+XpXo83wfT4b2zqU4LmWoshNnZNK4Qow3DNzX+AJkly0wlXB+nGtA6kqRn06IjtiaCEaxSTT4SZ3SnDE5Zpkzfdlu3VDfghai52rBbVaY2xP3tYEb91B1RCmDvG/jQQpYAnXYkrr94PmLdR9OxGjX/WpcdI1MMYaEwTnGQlEoMX3+zVwpH4gLOHX
HideLogDirectory	1
HideLogSubdirectory	1
UnattendedMod	0

Informations

Name0	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	Client
Full Name	Client
EntryPoint	System.Void 鲿它檏幢첅Ƙ꺰酒�㍓큔ݧ낞ꫳ㹚帮ꆡ㬑죥::Main(System.String[])
Scope Name	Client
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Client
Assembly Version	1.4.1.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5.2
Total Strings	11123
Main Method	System.Void 鲿它檏幢첅Ƙ꺰酒�㍓큔ݧ낞ꫳ㹚帮ꆡ㬑죥::Main(System.String[])
Main IL Instruction Count	19
Main IL	ldc.i4 3072 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4.2 <null> call System.Void System.Windows.Forms.Application::SetUnhandledExceptionMode(System.Windows.Forms.UnhandledExceptionMode) ldnull <null> ldftn System.Void 鲿它檏幢첅Ƙ꺰酒�㍓큔ݧ낞ꫳ㹚帮ꆡ㬑죥::緀规찿謥伛㼰�⯧槥膪谔鴆꧰㳘〣濱缂ਠپ뷀(System.Object,System.Threading.ThreadExceptionEventArgs) newobj System.Void System.Threading.ThreadExceptionEventHandler::.ctor(System.Object,System.IntPtr) call System.Void System.Windows.Forms.Application::add_ThreadException(System.Threading.ThreadExceptionEventHandler) call System.AppDomain System.AppDomain::get_CurrentDomain() ldnull <null> ldftn System.Void 鲿它檏幢첅Ƙ꺰酒�㍓큔ݧ낞ꫳ㹚帮ꆡ㬑죥::険㒟ᲰÃ굣꧕ജ䧨㻂꓎䟆ꥱ災豛뜆챺ౠ姺㥇(System.Object,System.UnhandledExceptionEventArgs) newobj System.Void System.UnhandledExceptionEventHandler::.ctor(System.Object,System.IntPtr) callvirt System.Void System.AppDomain::add_UnhandledException(System.UnhandledExceptionEventHandler) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void ℱ㕡Ꞌ砐医뗅﫸͔툂炳쉉鮚ᱜ穂Ɠ㈹럱::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>
Module Name	Client
Full Name	Client
EntryPoint	System.Void 鲿它檏幢첅Ƙ꺰酒�㍓큔ݧ낞ꫳ㹚帮ꆡ㬑죥::Main(System.String[])
Scope Name	Client
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Client
Assembly Version	1.4.1.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5.2
Total Strings	11123
Main Method	System.Void 鲿它檏幢첅Ƙ꺰酒�㍓큔ݧ낞ꫳ㹚帮ꆡ㬑죥::Main(System.String[])
Main IL Instruction Count	19
Main IL	ldc.i4 3072 call System.Void System.Net.ServicePointManager::set_SecurityProtocol(System.Net.SecurityProtocolType) ldc.i4.2 <null> call System.Void System.Windows.Forms.Application::SetUnhandledExceptionMode(System.Windows.Forms.UnhandledExceptionMode) ldnull <null> ldftn System.Void 鲿它檏幢첅Ƙ꺰酒�㍓큔ݧ낞ꫳ㹚帮ꆡ㬑죥::緀规찿謥伛㼰�⯧槥膪谔鴆꧰㳘〣濱缂ਠپ뷀(System.Object,System.Threading.ThreadExceptionEventArgs) newobj System.Void System.Threading.ThreadExceptionEventHandler::.ctor(System.Object,System.IntPtr) call System.Void System.Windows.Forms.Application::add_ThreadException(System.Threading.ThreadExceptionEventHandler) call System.AppDomain System.AppDomain::get_CurrentDomain() ldnull <null> ldftn System.Void 鲿它檏幢첅Ƙ꺰酒�㍓큔ݧ낞ꫳ㹚帮ꆡ㬑죥::険㒟ᲰÃ굣꧕ജ䧨㻂꓎䟆ꥱ災豛뜆챺ౠ姺㥇(System.Object,System.UnhandledExceptionEventArgs) newobj System.Void System.UnhandledExceptionEventHandler::.ctor(System.Object,System.IntPtr) callvirt System.Void System.AppDomain::add_UnhandledException(System.UnhandledExceptionEventHandler) call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void ℱ㕡Ꞌ砐医뗅﫸͔툂炳쉉鮚ᱜ穂Ɠ㈹럱::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>

Artefacts

Name0	Value
CnC	testseriesbymadhavi.in.net
Port	4782
CnC	au88vietnam.pro
CnC	au88.it.com
CnC	au88-binb.com
CnC	erogen.ru.com
CnC	uotahi.za.com
CnC	au88kitty.com
CnC	consultrade.uk.com
CnC	vn-au88.com
CnC	mqdfpy.sa.com
CnC	au88-top.com
CnC	www.testseriesbymadhavi.in.net
CnC	www.au88vietnam.pro
CnC	www.au88.it.com
CnC	www.au88-binb.com
CnC	www.erogen.ru.com
CnC	www.uotahi.za.com
CnC	www.au88kitty.com
CnC	www.consultrade.uk.com
CnC	www.vn-au88.com
CnC	www.mqdfpy.sa.com
CnC	www.au88-top.com
Port	443

5f8321c55d3ffcf56105303b96299ce6 (3.28 MB)