General
-
Target
d.exe
-
Size
3.1MB
-
Sample
231031-kkbk7scb38
-
MD5
2e259fbc3787a5e3ff7632710bb33af3
-
SHA1
b93fe7583571b9025c7e128e18ce15e0c2d16a91
-
SHA256
fe075e8ca5cfabd135a0af03cef236be4051d5bf21d8f248608e6001dc0ad540
-
SHA512
96edeb10924865b67ae3452b773ff7f663a8f56bdd46ab0d81ddd3aacecd1fa1f934b6e557a2041e2d3ebacec278df1f6929d6d2b35df096d306e2e850e38678
-
SSDEEP
49152:7v/lL26AaNeWgPhlmVqvMQ7XSKk+HNoGdoTTHHB72eh2NT:7vNL26AaNeWgPhlmVqkQ7XSKk+t4
Behavioral task
behavioral1
Sample
d.exe
Resource
win7-20231023-en
Malware Config
Extracted
quasar
1.4.1
Office04
schools-softball.gl.at.ply.gg:4982
a578ef69-a4c3-4b4d-93d0-eedab011b9a0
-
encryption_key
B2D10FC0E96E4BCBC2FAA3B7B5EE850CBD6D31C3
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Quasar Client Startup
-
subdirectory
SubDir
Targets
-
-
Target
d.exe
-
Size
3.1MB
-
MD5
2e259fbc3787a5e3ff7632710bb33af3
-
SHA1
b93fe7583571b9025c7e128e18ce15e0c2d16a91
-
SHA256
fe075e8ca5cfabd135a0af03cef236be4051d5bf21d8f248608e6001dc0ad540
-
SHA512
96edeb10924865b67ae3452b773ff7f663a8f56bdd46ab0d81ddd3aacecd1fa1f934b6e557a2041e2d3ebacec278df1f6929d6d2b35df096d306e2e850e38678
-
SSDEEP
49152:7v/lL26AaNeWgPhlmVqvMQ7XSKk+HNoGdoTTHHB72eh2NT:7vNL26AaNeWgPhlmVqkQ7XSKk+t4
-
Quasar payload
-