General

  • Target
    https://gofile.io/d/ttia5b
  • Sample240224-a8d15aeb51

Malware Config

Extracted

Family
  • quasar

Version
  • 1.4.1

Botnet
  • Office04

C2
  • 192.168.1.190:4782

Mutex
  • 5df2cd7e-6571-470a-a39d-a1719f75fbf7

Attributes
  • encryption_key

    A2A75FACA1C06678218490A9901AB58F2060EBFC

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    client

  • subdirectory

    SubDir

Targets

MITRE ATT&CK Enterprise v15

Tasks