General
-
Target
Client-built.exe
-
Size
3.1MB
-
Sample
240615-pn9dvsvamm
-
MD5
cabf60cd922c090eab3479a54df85881
-
SHA1
2d8cac7f6d34d091fd8b3492db12ed2b03de42e1
-
SHA256
aaac0a15c0e347fc8be6933015f8e9293dbaf217a34ce9b57d75de1dd3f6b1af
-
SHA512
be7b72cd2aab15a455095677d1ce6b89c2cc7ffa64f20ffb2237f7d4f400af127dfa1ef3211463f4a7b7c6a01615c2187a98d5be01759ed5fef89b7e4de31f34
-
SSDEEP
49152:3vaI22SsaNYfdPBldt698dBcjHbIRJ6LbR3LoGdYTHHB72eh2NT:3vX22SsaNYfdPBldt6+dBcjHbIRJ6d
Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win7-20240508-en
Malware Config
Extracted
quasar
1.4.1
Office04
192.168.43.153:4782
429a52df-3422-4acc-8faa-0966f3bfcf1c
-
encryption_key
CCD08F8B971DB48D50069B79D7B2E987CB15BF90
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Quasar Client Startup
-
subdirectory
SubDir
Targets
-
-
Target
Client-built.exe
-
Size
3.1MB
-
MD5
cabf60cd922c090eab3479a54df85881
-
SHA1
2d8cac7f6d34d091fd8b3492db12ed2b03de42e1
-
SHA256
aaac0a15c0e347fc8be6933015f8e9293dbaf217a34ce9b57d75de1dd3f6b1af
-
SHA512
be7b72cd2aab15a455095677d1ce6b89c2cc7ffa64f20ffb2237f7d4f400af127dfa1ef3211463f4a7b7c6a01615c2187a98d5be01759ed5fef89b7e4de31f34
-
SSDEEP
49152:3vaI22SsaNYfdPBldt698dBcjHbIRJ6LbR3LoGdYTHHB72eh2NT:3vX22SsaNYfdPBldt6+dBcjHbIRJ6d
-
Quasar payload
-
Executes dropped EXE
-