General
- Target Client-built.exe
- Size 3.1MB
- Sample231006-vdsk9agf59
- SHA256 0bde72f7fac05fa3604180b474d3690c73e792274f9c56d967e47345eef17c3b
- MD5 273f9c44dded57447cf91a3310159af6
- SHA1 439c1158fdd311dc4a5b688cff83bfa9a285a862
- SHA512 37659fa009e1dc208699f92db4283bfc1175bfee2ab9a8442f572a47ee87625992370d943d2b7fbce479a3790a6f541c7093ec6c25b3f3e35ad927386e80b4c1
- SSDEEP 49152:CvbI22SsaNYfdPBldt698dBcjHXs/6VoJdvIM9sTHHB72eh2NT:Cvk22SsaNYfdPBldt6+dBcjHXs/4DM
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
Family
-
quasar
Version
-
1.4.1
Botnet
-
Office04
C2
-
37.216.22.195:8888
Mutex
-
331c4a74-ae06-4cbd-b2f0-d55ca25c7830
Attributes
-
encryption_key
E25714CA4A028950408436B93E869C1C1E0812ED
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Quasar Client Startup
-
subdirectory
SubDir
Targets
-
- Target Client-built.exe
- Size 3.1MB
- SHA256 0bde72f7fac05fa3604180b474d3690c73e792274f9c56d967e47345eef17c3b
- MD5 273f9c44dded57447cf91a3310159af6
- SHA1 439c1158fdd311dc4a5b688cff83bfa9a285a862
- SHA512 37659fa009e1dc208699f92db4283bfc1175bfee2ab9a8442f572a47ee87625992370d943d2b7fbce479a3790a6f541c7093ec6c25b3f3e35ad927386e80b4c1
- SSDEEP 49152:CvbI22SsaNYfdPBldt698dBcjHXs/6VoJdvIM9sTHHB72eh2NT:Cvk22SsaNYfdPBldt6+dBcjHXs/4DM
- MD5 SHA1 SHA512 SSDEEP
-
Quasar payload