General
-
Target
Client-built.exe
-
Size
3.1MB
-
Sample
240630-r4e63azblg
-
MD5
bd22cd33208d9f613123693356b06a31
-
SHA1
30f84ab122328cbdbb0059f233056ef3e123c59c
-
SHA256
aeea5611efcebc1112055000624ea27dbd3d9a05dae851732a983e7ec287b190
-
SHA512
134ce387dab94c55a2d85b647d1eb65000b67184cb83d5c2486d777ba7729d4c7d99f59fabe8fde7bfde588b99d3149f847fed4a96cc6e085265eea2d5f55186
-
SSDEEP
49152:HvulL26AaNeWgPhlmVqvMQ7XSKUVm+mzghoGdSmTHHB72eh2NT:HveL26AaNeWgPhlmVqkQ7XSKUVmy
Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win10v2004-20240508-en
Malware Config
Extracted
quasar
1.4.1
Spoffer Fivem
pringelsy-53072.portmap.host:53072
c70aabf1-c896-42de-8406-22e4348930d6
-
encryption_key
3107DF2D44BB6914C55BEA57D100135AB0F278DF
-
install_name
alg.exe
-
log_directory
Logs
-
reconnect_delay
799
-
startup_key
Quasar Client Startup
-
subdirectory
Common Files
Targets
-
-
Target
Client-built.exe
-
Size
3.1MB
-
MD5
bd22cd33208d9f613123693356b06a31
-
SHA1
30f84ab122328cbdbb0059f233056ef3e123c59c
-
SHA256
aeea5611efcebc1112055000624ea27dbd3d9a05dae851732a983e7ec287b190
-
SHA512
134ce387dab94c55a2d85b647d1eb65000b67184cb83d5c2486d777ba7729d4c7d99f59fabe8fde7bfde588b99d3149f847fed4a96cc6e085265eea2d5f55186
-
SSDEEP
49152:HvulL26AaNeWgPhlmVqvMQ7XSKUVm+mzghoGdSmTHHB72eh2NT:HveL26AaNeWgPhlmVqkQ7XSKUVmy
Score10/10-
Quasar payload
-
Executes dropped EXE
-