General

  • Target
    https://www.mediafire.com/file/bkcs7sit3hulwt8/Office.zip/file
  • Sample240225-e36w6scb8s

Malware Config

Extracted

Family
  • quasar

Version
  • 1.4.1

Botnet
  • Office04

C2
  • 192.168.1.143:4782

Mutex
  • 513b4be8-c41b-4f12-a11e-e57e3b0162b5

Attributes
  • encryption_key

    3FEE507DD232D8B3EFCDDBA4F36B5709E0C528B4

  • install_name

    Office.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Microsoft-Office

  • subdirectory

    Microsoft-Office-New

Targets

MITRE ATT&CK Enterprise v15

Tasks