General
- Target Client.exe
- Size 3.1MB
- Sample240108-lrl6ysfdap
- SHA256 07f103ec9f4cf73a1ea534a7b1fed490045e8611c14cb66dfe8784f01ea63e5c
- MD5 e64f8a72adecf3dce6eb67c5af27425d
- SHA1 c685f6603db00a86abc5f1db8ac5bdc36205c5cb
- SHA512 ac54fec2dd21730a00d722de22a27223515bcf8cf27d835ae7b842e1aae705505f85b1b6a56e79908cd5618c24db2ba16280cd5d8e7b135bc2711dee42b8cde1
- SSDEEP 49152:rvyI22SsaNYfdPBldt698dBcjHEHDIueDikCITGdnTHHB72eh2NT:rvf22SsaNYfdPBldt6+dBcjHEHMuI
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
Client.exe
Resource
win7-20231215-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
quasar
Version
-
1.4.1
Botnet
-
My PC
C2
-
192.168.1.170:4782
Mutex
-
5ec5d98d-16b9-4822-ac2e-48ac1044baf0
Attributes
-
encryption_key
534C27E19B457CB0AEF27B90427FDDDAF8C2920A
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Quasar Client Startup
-
subdirectory
SubDir
Targets
-
- Target Client.exe
- Size 3.1MB
- SHA256 07f103ec9f4cf73a1ea534a7b1fed490045e8611c14cb66dfe8784f01ea63e5c
- MD5 e64f8a72adecf3dce6eb67c5af27425d
- SHA1 c685f6603db00a86abc5f1db8ac5bdc36205c5cb
- SHA512 ac54fec2dd21730a00d722de22a27223515bcf8cf27d835ae7b842e1aae705505f85b1b6a56e79908cd5618c24db2ba16280cd5d8e7b135bc2711dee42b8cde1
- SSDEEP 49152:rvyI22SsaNYfdPBldt698dBcjHEHDIueDikCITGdnTHHB72eh2NT:rvf22SsaNYfdPBldt6+dBcjHEHMuI
- MD5 SHA1 SHA512 SSDEEP
-
Quasar payload