Symbol Obfuscation Score
|
Hash | Hash Value |
|---|---|
| MD5 | 86d9f9b8c5bf10e9a2131429dc74f133
|
| Sha1 | e0fbaae6269af164a3399908b275a0e7d2e3b4c0
|
| Sha256 | 1f8e4f9a1b4bf217a83b0e100631120a424afe567e7a1fbe84e74f06f3da52c8
|
| Sha384 | 76b2ab4e5a9ca66a087d94db637c45f31933bfaf67002618d6431eee16bc9cda568c751e50e9a7560ae6f1c01f99f68c
|
| Sha512 | 45cb87f06ab8cd848578f4133409fc67a6226906cbfb5006c0665509355237cf78ff5bb46e9e52781f6dd2d4aaae698222bdf3e3aa66f9c376b8b2c69f51fe03
|
| SSDeep | 6144:9LNHXf500M8B+1gbuTbG5E/Gn4C9HXDBnRCunk4X:Bd50J1gqL/C9T1R/X
|
| TLSH | 38747B1377A8E63BD1BE177BE03205142BF0D446B716E38B6A6855BCAC123868D917F3
|
|
Config. Field0 | Value |
|---|---|
| Conf. AES-Salt | BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41 |
| Conf. AES-Key | bshp2B76on6QymiDmd4K |
| Version | 1.3.0.0 |
| Port | kamal199.ddns.ne |
| Host | kamal199.ddns.ne |
| ReconnectDelay | 3000 |
| Key | 1WvgEMPjdwfqIMeM9MclyQ== |
| AuthKey | NcFtjbDOcsw7Evd3coMC0y4koy/SRZGydhNmno81ZOWOvdfg7sv0Cj5ad2ROUfX4QMscAIjYJdjrrs41+qcQwg== |
| SubDirectory | setup |
| InstallName | Client.exe |
| Install | 0 |
| Startup | 1 |
| Mutex | QSR_MUTEX_ZIhw2o |
| StartupKey | Quasar Client St |
| HideFile | 0 |
| EnableLogger | 1 |
| Tag | setup |
| LogDirectory | Logs |
| HideLogDirectory | 0 |
| HideLogSubdirectory | 0 |
|
Name0 | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | Client.exe |
| Full Name | Client.exe |
| EntryPoint | System.Void �䛠䡼�♍铥鐆뢀ൺᜆ讣㩼〈፸ፎ呤뙣뎦::Main(System.String[]) |
| Scope Name | Client.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Client |
| Assembly Version | 1.3.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.0,Profile=Client |
| Total Strings | 896 |
| Main Method | System.Void �䛠䡼�♍铥鐆뢀ൺᜆ讣㩼〈፸ፎ呤뙣뎦::Main(System.String[]) |
| Main IL Instruction Count | 19 |
| Main IL | call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) call System.AppDomain System.AppDomain::get_CurrentDomain() ldnull <null> ldftn System.Void �䛠䡼�♍铥鐆뢀ൺᜆ讣㩼〈፸ፎ呤뙣뎦::፠麧兾Ƨ旾ꖧ鰘ꛇ챠䮓и쒣ࡨ�歎ꎫ忌鑚ﴕ(System.Object,System.UnhandledExceptionEventArgs) newobj System.Void System.UnhandledExceptionEventHandler::.ctor(System.Object,System.IntPtr) callvirt System.Void System.AppDomain::add_UnhandledException(System.UnhandledExceptionEventHandler) call System.Boolean ꅖ鱽�뮹ፊ莝윫켡鸏᪰ຂ葈Ѩ좇蔮싐㨴䷊㑝蜡::槮嵾瓃ﮏ疵익憗뷩쳻敌꒽꜒Ⲟ鴭䠤琭ퟄዲ馶() brfalse.s IL_0040: call System.Void �䛠䡼�♍铥鐆뢀ൺᜆ讣㩼〈፸ፎ呤뙣뎦::䵺ՙ㺂ᶋ慸ꠓ伔㕂뿜؟댊鈸腀簇() call System.Boolean �䛠䡼�♍铥鐆뢀ൺᜆ讣㩼〈፸ፎ呤뙣뎦::醯␔튂ꈄ酖䍎槞岜鼃켲ᴏ덍鮚ꜣ貤萤() brfalse.s IL_0040: call System.Void �䛠䡼�♍铥鐆뢀ൺᜆ讣㩼〈፸ፎ呤뙣뎦::䵺ՙ㺂ᶋ慸ꠓ伔㕂뿜؟댊鈸腀簇() call System.Boolean 危ဍ濉滟鈅湴ろ䚙졧蠐质貱ރ魤ա踱ꢈ蠤㪒呻::get_Exiting() brtrue.s IL_0040: call System.Void �䛠䡼�♍铥鐆뢀ൺᜆ讣㩼〈፸ፎ呤뙣뎦::䵺ՙ㺂ᶋ慸ꠓ伔㕂뿜؟댊鈸腀簇() ldsfld 危ဍ濉滟鈅湴ろ䚙졧蠐质貱ރ魤ա踱ꢈ蠤㪒呻 �䛠䡼�♍铥鐆뢀ൺᜆ讣㩼〈፸ፎ呤뙣뎦::㴯㪾냧㣘忚ﴷ⟚咒쓱卑㠞阞쎂힇�쉋ꨱ�먚 callvirt System.Void 危ဍ濉滟鈅湴ろ䚙졧蠐质貱ރ魤ա踱ꢈ蠤㪒呻::马몣اꋺ펖홞㓔ⳃ呎ႈ䇗愙藑뫟塞涡ꯧᘏ() call System.Void �䛠䡼�♍铥鐆뢀ൺᜆ讣㩼〈፸ፎ呤뙣뎦::䵺ՙ㺂ᶋ慸ꠓ伔㕂뿜؟댊鈸腀簇() call System.Void �䛠䡼�♍铥鐆뢀ൺᜆ讣㩼〈፸ፎ呤뙣뎦::ᓲ䂄匔紻ꟾ㽗셠㶃澘䑴䢪윅쐓♾䙧ꗏ䣩띥() ret <null> |
|
Name0 | Value |
|---|---|
| CnC | kamal199.ddns.ne |
| Port | kamal199.ddns.ne |
|
Config. Field0 | Value |
|---|---|
| Conf. AES-Salt | BF-EB-1E-56-FB-CD-97-3B-B2-19-02-24-30-A5-78-43-00-3D-56-44-D2-1E-62-B9-D4-F1-80-E7-E6-C3-39-41 |
| Conf. AES-Key | bshp2B76on6QymiDmd4K |
| Version | 1.3.0.0 |
| Port | kamal199.ddns.ne |
| Host | kamal199.ddns.ne |
| ReconnectDelay | 3000 |
| Key | 1WvgEMPjdwfqIMeM9MclyQ== |
| AuthKey | NcFtjbDOcsw7Evd3coMC0y4koy/SRZGydhNmno81ZOWOvdfg7sv0Cj5ad2ROUfX4QMscAIjYJdjrrs41+qcQwg== |
| SubDirectory | setup |
| InstallName | Client.exe |
| Install | 0 |
| Startup | 1 |
| Mutex | QSR_MUTEX_ZIhw2o |
| StartupKey | Quasar Client St |
| HideFile | 0 |
| EnableLogger | 1 |
| Tag | setup |
| LogDirectory | Logs |
| HideLogDirectory | 0 |
| HideLogSubdirectory | 0 |
|
Name0 | Value | Location |
|---|---|---|
| CnC | kamal199.ddns.ne Malicious |
86d9f9b8c5bf10e9a2131429dc74f133 |
| Port | kamal199.ddns.ne Malicious |
86d9f9b8c5bf10e9a2131429dc74f133 |