General

  • Target
    https://gofile.io/d/l63uKY
  • Sample240415-s77adsab69

Malware Config

Extracted

Family
  • quasar

Version
  • 1.4.1

Botnet
  • svchost

C2
  • 86.121.5.213:4791:4791

Mutex
  • 07a71e87-4534-405d-89f0-d7a1c9099ee4

Attributes
  • encryption_key

    5E3EFA806B785DA642E6D37090C2AACA9EE3193F

  • install_name

    svchost.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Realtek HD Audio Universal Service

Targets

MITRE ATT&CK Enterprise v15

Tasks