General
-
Target
eeeeee.exe
-
Size
3.1MB
-
Sample
240701-1hmhpa1epc
-
MD5
a207f2326a2eac7a5229faadbb4efde9
-
SHA1
47e061e350caad04fe5249dfec6bd0e5719314a2
-
SHA256
809964ab91ce04e170c33c00343fa8aebc01c3ae46b32ed66821726a6fa6c753
-
SHA512
961e273cd252331ef100e9239fb03da60aa6b1954f6864509cd643adcfaf2afb6df7d7b20b765d0092a01b03cee8950f85f0f9298d46ce0d9d1de1385da754bf
-
SSDEEP
49152:fvAG42pda6D+/PjlLOlg6yQipVAiDkE2HGk/+F9oGdoRjTHHB72eh2NT:fvD42pda6D+/PjlLOlZyQipVAiDHn
Malware Config
Extracted
quasar
1.4.1
Office04
com-cathedral.gl.at.ply.gg:60312:60312
1998:1998
7275eed2-cfc2-4aaa-85a9-989867afc89d
-
encryption_key
1F7D88978B03E5C08F9DEDBD0A0F2EF673BE9527
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Quasar Client Startup
-
subdirectory
SubDir
Targets
-
-
Target
eeeeee.exe
-
Size
3.1MB
-
MD5
a207f2326a2eac7a5229faadbb4efde9
-
SHA1
47e061e350caad04fe5249dfec6bd0e5719314a2
-
SHA256
809964ab91ce04e170c33c00343fa8aebc01c3ae46b32ed66821726a6fa6c753
-
SHA512
961e273cd252331ef100e9239fb03da60aa6b1954f6864509cd643adcfaf2afb6df7d7b20b765d0092a01b03cee8950f85f0f9298d46ce0d9d1de1385da754bf
-
SSDEEP
49152:fvAG42pda6D+/PjlLOlg6yQipVAiDkE2HGk/+F9oGdoRjTHHB72eh2NT:fvD42pda6D+/PjlLOlZyQipVAiDHn
-
Quasar payload
-