adb9349916189a54ff66650eacd0db73ed931be39e4118f78d21d24b2b8932b4

Submit
Reports

Overview

overview

Static

static

Quasar-master.7z

windows10-1703-x64

Quasar.Ser...ner.cs

windows10-1703-x64

Quasar.Ser...Add.cs

windows10-1703-x64

Quasar.Ser...ner.cs

windows10-1703-x64

Quasar.Ser...ner.cs

windows10-1703-x64

Quasar.Ser...ner.cs

windows10-1703-x64

Quasar.Ser...ger.cs

windows10-1703-x64

Quasar.Ser...ter.cs

windows10-1703-x64

Quasar.Ser...per.cs

windows10-1703-x64

Quasar.Ser...per.cs

windows10-1703-x64

Quasar.Ser...me.xml

windows10-1703-x64

Quasar.Ser...ar.pdb

windows10-1703-x64

Quasar.Ser....cache

windows10-1703-x64

Quasar.Ser...c.json

windows10-1703-x64

Quasar.Ser....props

windows10-1703-x64

Quasar.Ser...argets

windows10-1703-x64

Quasar.Ser...me.xml

windows10-1703-x64

Quasar.sln

windows10-1703-x64

packages/D....nupkg

windows10-1703-x64

packages/E....nupkg

windows10-1703-x64

packages/E...S2.ps1

windows10-1703-x64

packages/E...k6.ps1

windows10-1703-x64

packages/E...it.ps1

windows10-1703-x64

packages/E...ll.ps1

windows10-1703-x64

packages/E...f6.exe

windows10-1703-x64

packages/E...f6.exe

windows10-1703-x64

packages/E...f6.exe

windows10-1703-x64

packages/E...f6.exe

windows10-1703-x64

packages/F...rs.dll

windows10-1703-x64

packages/F...db.dll

windows10-1703-x64

packages/F...rs.dll

windows10-1703-x64

packages/F...db.dll

windows10-1703-x64

Analysis

max time kernel
122s
max time network
140s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
21-05-2024 00:01

Sharing

Copy URL

Twitter E-mail

Static task

static1

quasar

3 signatures

Behavioral task

behavioral1

Sample

Quasar-master.7z

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

Quasar.Server/Forms/FrmStartupAdd.Designer.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

Quasar.Server/Forms/FrmStartupAdd.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

Quasar.Server/Forms/FrmStartupManager.Designer.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

Quasar.Server/Forms/FrmSystemInformation.Designer.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

Quasar.Server/Forms/FrmTaskManager.Designer.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

Quasar.Server/Forms/FrmTaskManager.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

Quasar.Server/Helper/LogsViewUpdater.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Quasar.Server/Helper/NativeMethodsHelper.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

Quasar.Server/Helper/WindowHelper.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

Quasar.Server/obj/Debug/net452/Quasar.exe.withSupportedRuntime.xml

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

Quasar.Server/obj/Debug/net452/Quasar.pdb

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

Quasar.Server/obj/Debug/net47/Quasar.Server.assets.cache

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

Quasar.Server/obj/Quasar.Server.csproj.nuget.dgspec.json

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

Quasar.Server/obj/Quasar.Server.csproj.nuget.g.props

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

Quasar.Server/obj/Quasar.Server.csproj.nuget.g.targets

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

Quasar.Server/obj/Release/net452/Quasar.exe.withSupportedRuntime.xml

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

Quasar.sln

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

packages/DotNetZip.Reduced.1.9.1.8/DotNetZip.Reduced.1.9.1.8.nupkg

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

packages/EntityFramework.6.4.4/EntityFramework.6.4.4.nupkg

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

packages/EntityFramework.6.4.4/tools/EntityFramework6.PS2.ps1

Resource

win10-20240404-en

execution

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

packages/EntityFramework.6.4.4/tools/EntityFramework6.ps1

Resource

win10-20240404-en

execution

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

packages/EntityFramework.6.4.4/tools/init.ps1

Resource

win10-20240404-en

execution

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

packages/EntityFramework.6.4.4/tools/install.ps1

Resource

win10-20240404-en

execution

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

packages/EntityFramework.6.4.4/tools/net40/any/ef6.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

packages/EntityFramework.6.4.4/tools/net40/win-x86/ef6.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

packages/EntityFramework.6.4.4/tools/net45/win-x86/ef6.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

packages/EntityFramework.6.4.4/tools/netcoreapp3.0/any/ef6.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

packages/Fody.6.7.0/netclassictask/FodyHelpers.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

packages/Fody.6.7.0/netclassictask/Mono.Cecil.Pdb.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

packages/Fody.6.7.0/netstandardtask/FodyHelpers.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

packages/Fody.6.7.0/netstandardtask/Mono.Cecil.Pdb.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

packages/EntityFramework.6.4.4/tools/net40/any/ef6.exe
Size

75KB
MD5

a6f787d3b37334afe22188dff6a30820
SHA1

e7e5d7dfeaca04eeab27b3882449a9a5340d9d36
SHA256

0bfb776ed5d03b6b3d36b4842d827a1b9ec280d41f2ec3af71c4e1c8923f1aff
SHA512

6b6eb2bdf60fe18d34c7ce85924b300506e9c6c4d7d5eaac66e83a7876b69337602921f649e94d17e3ffec7e985bf6c2c9eb8864e7144932fbcdc2a883cdff0a
SSDEEP

768:KIyHRUXxEnfORqv6q5q4EAjs6ZlrZbbsnVuS9qPKA5kJ4ri1CCQJaAsr8OJN:7cRIoPFEAj5lrZbSuSkC2n2WJaAs4OJN

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\packages\EntityFramework.6.4.4\tools\net40\any\ef6.exe
"C:\Users\Admin\AppData\Local\Temp\packages\EntityFramework.6.4.4\tools\net40\any\ef6.exe"
1⤵
PID:2760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2760-0-0x0000025E76890000-0x0000025E768A8000-memory.dmp

Filesize
96KB

Download
memory/2760-1-0x00007FFBB4133000-0x00007FFBB4134000-memory.dmp

Filesize
4KB

Download