Overview

overview

10

Static

static

10

Quasar.exe

windows11-21h2-x64

10

Resubmissions

11/05/2024, 00:04

240511-acs56she9v 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b5160de7-79cd-73a4-898c-5075da7b7de1.zip

  • Size

    3.1MB

  • MD5

    c830d1e86f77f924a31515309841d870

  • SHA1

    8482570c76412e3ada624297c4fd323e1f01ecd2

  • SHA256

    8fcba0e72c735518fa89e18a8651684c8195c4ea2b9fa4f52d09e81e6c67611a

  • SHA512

    63828299e1b07d055ed63017d690c2da3d3f30022f5a2599df485d4d796fa6c6f9c6ac1153d499a885ce611f503f574b5861b0236966c3d7f9a3eac75c6a57dd

  • SSDEEP

    49152:SvUt62XlaSFNWPjljiFa2RoUYIOwRJ6kbR3LoGdbTHHB72eh2NTT:SvI62XlaSFNWPjljiFXRoUYIOwRJ6uM

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Office04

C2

10.2.0.2:4782

Mutex

c5c287ad-0a57-48e5-99fb-50e919752c29

Attributes
  • encryption_key

    6C081B1F8057B935D39BEA607376E6B32A915EB8

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 2 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b5160de7-79cd-73a4-898c-5075da7b7de1.zip
    .zip
  • Quasar.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections