adb9349916189a54ff66650eacd0db73ed931be39e4118f78d21d24b2b8932b4

Submit
Reports

Overview

overview

Static

static

Quasar-master.7z

windows10-1703-x64

Quasar.Ser...ner.cs

windows10-1703-x64

Quasar.Ser...Add.cs

windows10-1703-x64

Quasar.Ser...ner.cs

windows10-1703-x64

Quasar.Ser...ner.cs

windows10-1703-x64

Quasar.Ser...ner.cs

windows10-1703-x64

Quasar.Ser...ger.cs

windows10-1703-x64

Quasar.Ser...ter.cs

windows10-1703-x64

Quasar.Ser...per.cs

windows10-1703-x64

Quasar.Ser...per.cs

windows10-1703-x64

Quasar.Ser...me.xml

windows10-1703-x64

Quasar.Ser...ar.pdb

windows10-1703-x64

Quasar.Ser....cache

windows10-1703-x64

Quasar.Ser...c.json

windows10-1703-x64

Quasar.Ser....props

windows10-1703-x64

Quasar.Ser...argets

windows10-1703-x64

Quasar.Ser...me.xml

windows10-1703-x64

Quasar.sln

windows10-1703-x64

packages/D....nupkg

windows10-1703-x64

packages/E....nupkg

windows10-1703-x64

packages/E...S2.ps1

windows10-1703-x64

packages/E...k6.ps1

windows10-1703-x64

packages/E...it.ps1

windows10-1703-x64

packages/E...ll.ps1

windows10-1703-x64

packages/E...f6.exe

windows10-1703-x64

packages/E...f6.exe

windows10-1703-x64

packages/E...f6.exe

windows10-1703-x64

packages/E...f6.exe

windows10-1703-x64

packages/F...rs.dll

windows10-1703-x64

packages/F...db.dll

windows10-1703-x64

packages/F...rs.dll

windows10-1703-x64

packages/F...db.dll

windows10-1703-x64

Analysis

max time kernel
127s
max time network
140s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
21-05-2024 00:01

Sharing

Copy URL

Twitter E-mail

Static task

static1

quasar

3 signatures

Behavioral task

behavioral1

Sample

Quasar-master.7z

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

Quasar.Server/Forms/FrmStartupAdd.Designer.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

Quasar.Server/Forms/FrmStartupAdd.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

Quasar.Server/Forms/FrmStartupManager.Designer.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

Quasar.Server/Forms/FrmSystemInformation.Designer.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

Quasar.Server/Forms/FrmTaskManager.Designer.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

Quasar.Server/Forms/FrmTaskManager.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

Quasar.Server/Helper/LogsViewUpdater.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Quasar.Server/Helper/NativeMethodsHelper.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

Quasar.Server/Helper/WindowHelper.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

Quasar.Server/obj/Debug/net452/Quasar.exe.withSupportedRuntime.xml

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

Quasar.Server/obj/Debug/net452/Quasar.pdb

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

Quasar.Server/obj/Debug/net47/Quasar.Server.assets.cache

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

Quasar.Server/obj/Quasar.Server.csproj.nuget.dgspec.json

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

Quasar.Server/obj/Quasar.Server.csproj.nuget.g.props

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

Quasar.Server/obj/Quasar.Server.csproj.nuget.g.targets

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

Quasar.Server/obj/Release/net452/Quasar.exe.withSupportedRuntime.xml

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

Quasar.sln

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

packages/DotNetZip.Reduced.1.9.1.8/DotNetZip.Reduced.1.9.1.8.nupkg

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

packages/EntityFramework.6.4.4/EntityFramework.6.4.4.nupkg

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

packages/EntityFramework.6.4.4/tools/EntityFramework6.PS2.ps1

Resource

win10-20240404-en

execution

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

packages/EntityFramework.6.4.4/tools/EntityFramework6.ps1

Resource

win10-20240404-en

execution

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

packages/EntityFramework.6.4.4/tools/init.ps1

Resource

win10-20240404-en

execution

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

packages/EntityFramework.6.4.4/tools/install.ps1

Resource

win10-20240404-en

execution

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

packages/EntityFramework.6.4.4/tools/net40/any/ef6.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

packages/EntityFramework.6.4.4/tools/net40/win-x86/ef6.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

packages/EntityFramework.6.4.4/tools/net45/win-x86/ef6.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

packages/EntityFramework.6.4.4/tools/netcoreapp3.0/any/ef6.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

packages/Fody.6.7.0/netclassictask/FodyHelpers.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

packages/Fody.6.7.0/netclassictask/Mono.Cecil.Pdb.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

packages/Fody.6.7.0/netstandardtask/FodyHelpers.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

packages/Fody.6.7.0/netstandardtask/Mono.Cecil.Pdb.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

packages/EntityFramework.6.4.4/tools/net40/win-x86/ef6.exe
Size

75KB
MD5

ac9cc37bb6105ffe5f6234511d700201
SHA1

922bb85e6db74ae0e855502e4545be7af0bb6af7
SHA256

71f9f9554ac4353ed2dc4b21550e57c306749e3dfe6d208b71f76fbca32ac219
SHA512

e2a08e448979e6b89ae53e6a0f2e7b9b72f69fc76689488030fd0f5b795847eee7acd39b86ca4f43e75d621ebebedbdd0e06ab9bf627a5642adc01335db95fd8
SSDEEP

768:7ayHRUXxEnfORqv6q5q4EAjs6ZlrZbbsnVuS9qPKA5kJ4ei1CCQJavS810wg:WcRIoPFEAj5lrZbSuSkC2nzWJavPiwg

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\packages\EntityFramework.6.4.4\tools\net40\win-x86\ef6.exe
"C:\Users\Admin\AppData\Local\Temp\packages\EntityFramework.6.4.4\tools\net40\win-x86\ef6.exe"
1⤵
PID:4176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4176-0-0x000000007394E000-0x000000007394F000-memory.dmp

Filesize
4KB

Download
memory/4176-1-0x0000000000530000-0x0000000000548000-memory.dmp

Filesize
96KB

Download