Resubmissions
21-04-2024 23:00
240421-2y8ljacd95 10General
-
Target
ChappoSpoofer.exe
-
Size
3.1MB
-
Sample
240421-2y8ljacd95
-
MD5
de96227eb0709f5bb30dde675b9e6dc4
-
SHA1
7f3aafdce9b7dd050630e801e8e5b76a95b5e336
-
SHA256
993278405cabf3bb46e69f5784dacc4ac68ed04b5af84de962e15af2b9561618
-
SHA512
a3b8df5efe2015bef35f7bdedc03b4c807e58241e057437d897bb1e3ca73e2fb46e68a65c8db3dfc24697851842677b0d88e58854d97345069e235fe3c68745e
-
SSDEEP
49152:fvClL26AaNeWgPhlmVqvMQ7XSKc6DiEQs2kCxSLoGGfTHHB72eh2NT7:fv6L26AaNeWgPhlmVqkQ7XSKc6Dec
Behavioral task
behavioral1
Sample
ChappoSpoofer.exe
Resource
win7-20240220-en
Malware Config
Extracted
quasar
1.4.1
Office04
192.168.137.178:4782
8d2015a7-d791-4873-bbd6-4c909ace97fb
-
encryption_key
078EC3386276E19F98076915A82DEE6A83AA8AFE
-
install_name
ChappoSpoofer.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Quasar Client Startup
-
subdirectory
SubDir
Targets
-
-
Target
ChappoSpoofer.exe
-
Size
3.1MB
-
MD5
de96227eb0709f5bb30dde675b9e6dc4
-
SHA1
7f3aafdce9b7dd050630e801e8e5b76a95b5e336
-
SHA256
993278405cabf3bb46e69f5784dacc4ac68ed04b5af84de962e15af2b9561618
-
SHA512
a3b8df5efe2015bef35f7bdedc03b4c807e58241e057437d897bb1e3ca73e2fb46e68a65c8db3dfc24697851842677b0d88e58854d97345069e235fe3c68745e
-
SSDEEP
49152:fvClL26AaNeWgPhlmVqvMQ7XSKc6DiEQs2kCxSLoGGfTHHB72eh2NT7:fv6L26AaNeWgPhlmVqkQ7XSKc6Dec
-
Quasar payload
-
Executes dropped EXE
-