General
-
Target
Build.exe
-
Size
3.1MB
-
Sample
240518-eb1wvaae81
-
MD5
f4e8ba6e5317afb76d2824cd66fd0ee5
-
SHA1
9b5c76df487b31be7406462fb7b47f92ddbc2913
-
SHA256
04d6d049461760e618b83991580b42bc4155e4bd26fae20dd6c0f20ac68f2eb5
-
SHA512
1083bfff342f8d36f3deb903451f13fe715ae6e9cd033930ac513f8948adfdefe7d438807c80d1f6bdf101f9392e31b8e1e228b443bed2982a3af4ac37098bce
-
SSDEEP
49152:2vFt62XlaSFNWPjljiFa2RoUYI45zWPpLoGd8HTHHB72eh2NT:2v362XlaSFNWPjljiFXRoUYI45zWP5
Behavioral task
behavioral1
Sample
Build.exe
Resource
win11-20240419-en
Malware Config
Extracted
quasar
1.4.1
SteamHelper
192.168.10.149:4782
e4aae33b-e31c-49fd-b689-bef88dbb5ec5
-
encryption_key
AAC6E8ABF533EB37C22C1AA75BAA0CE9F73D90CC
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
SteamHelper
-
subdirectory
SteamHelper
Targets
-
-
Target
Build.exe
-
Size
3.1MB
-
MD5
f4e8ba6e5317afb76d2824cd66fd0ee5
-
SHA1
9b5c76df487b31be7406462fb7b47f92ddbc2913
-
SHA256
04d6d049461760e618b83991580b42bc4155e4bd26fae20dd6c0f20ac68f2eb5
-
SHA512
1083bfff342f8d36f3deb903451f13fe715ae6e9cd033930ac513f8948adfdefe7d438807c80d1f6bdf101f9392e31b8e1e228b443bed2982a3af4ac37098bce
-
SSDEEP
49152:2vFt62XlaSFNWPjljiFa2RoUYI45zWPpLoGd8HTHHB72eh2NT:2v362XlaSFNWPjljiFXRoUYI45zWP5
Score10/10-
Quasar payload
-
Executes dropped EXE
-