adb9349916189a54ff66650eacd0db73ed931be39e4118f78d21d24b2b8932b4

Submit
Reports

Overview

overview

Static

static

Quasar-master.7z

windows10-1703-x64

Quasar.Ser...ner.cs

windows10-1703-x64

Quasar.Ser...Add.cs

windows10-1703-x64

Quasar.Ser...ner.cs

windows10-1703-x64

Quasar.Ser...ner.cs

windows10-1703-x64

Quasar.Ser...ner.cs

windows10-1703-x64

Quasar.Ser...ger.cs

windows10-1703-x64

Quasar.Ser...ter.cs

windows10-1703-x64

Quasar.Ser...per.cs

windows10-1703-x64

Quasar.Ser...per.cs

windows10-1703-x64

Quasar.Ser...me.xml

windows10-1703-x64

Quasar.Ser...ar.pdb

windows10-1703-x64

Quasar.Ser....cache

windows10-1703-x64

Quasar.Ser...c.json

windows10-1703-x64

Quasar.Ser....props

windows10-1703-x64

Quasar.Ser...argets

windows10-1703-x64

Quasar.Ser...me.xml

windows10-1703-x64

Quasar.sln

windows10-1703-x64

packages/D....nupkg

windows10-1703-x64

packages/E....nupkg

windows10-1703-x64

packages/E...S2.ps1

windows10-1703-x64

packages/E...k6.ps1

windows10-1703-x64

packages/E...it.ps1

windows10-1703-x64

packages/E...ll.ps1

windows10-1703-x64

packages/E...f6.exe

windows10-1703-x64

packages/E...f6.exe

windows10-1703-x64

packages/E...f6.exe

windows10-1703-x64

packages/E...f6.exe

windows10-1703-x64

packages/F...rs.dll

windows10-1703-x64

packages/F...db.dll

windows10-1703-x64

packages/F...rs.dll

windows10-1703-x64

packages/F...db.dll

windows10-1703-x64

Analysis

max time kernel
126s
max time network
137s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
21-05-2024 00:01

Sharing

Copy URL

Twitter E-mail

Static task

static1

quasar

3 signatures

Behavioral task

behavioral1

Sample

Quasar-master.7z

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

Quasar.Server/Forms/FrmStartupAdd.Designer.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

Quasar.Server/Forms/FrmStartupAdd.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

Quasar.Server/Forms/FrmStartupManager.Designer.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

Quasar.Server/Forms/FrmSystemInformation.Designer.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

Quasar.Server/Forms/FrmTaskManager.Designer.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

Quasar.Server/Forms/FrmTaskManager.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

Quasar.Server/Helper/LogsViewUpdater.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Quasar.Server/Helper/NativeMethodsHelper.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

Quasar.Server/Helper/WindowHelper.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

Quasar.Server/obj/Debug/net452/Quasar.exe.withSupportedRuntime.xml

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

Quasar.Server/obj/Debug/net452/Quasar.pdb

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

Quasar.Server/obj/Debug/net47/Quasar.Server.assets.cache

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

Quasar.Server/obj/Quasar.Server.csproj.nuget.dgspec.json

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

Quasar.Server/obj/Quasar.Server.csproj.nuget.g.props

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

Quasar.Server/obj/Quasar.Server.csproj.nuget.g.targets

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

Quasar.Server/obj/Release/net452/Quasar.exe.withSupportedRuntime.xml

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

Quasar.sln

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

packages/DotNetZip.Reduced.1.9.1.8/DotNetZip.Reduced.1.9.1.8.nupkg

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

packages/EntityFramework.6.4.4/EntityFramework.6.4.4.nupkg

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

packages/EntityFramework.6.4.4/tools/EntityFramework6.PS2.ps1

Resource

win10-20240404-en

execution

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

packages/EntityFramework.6.4.4/tools/EntityFramework6.ps1

Resource

win10-20240404-en

execution

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

packages/EntityFramework.6.4.4/tools/init.ps1

Resource

win10-20240404-en

execution

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

packages/EntityFramework.6.4.4/tools/install.ps1

Resource

win10-20240404-en

execution

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

packages/EntityFramework.6.4.4/tools/net40/any/ef6.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

packages/EntityFramework.6.4.4/tools/net40/win-x86/ef6.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

packages/EntityFramework.6.4.4/tools/net45/win-x86/ef6.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

packages/EntityFramework.6.4.4/tools/netcoreapp3.0/any/ef6.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

packages/Fody.6.7.0/netclassictask/FodyHelpers.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

packages/Fody.6.7.0/netclassictask/Mono.Cecil.Pdb.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

packages/Fody.6.7.0/netstandardtask/FodyHelpers.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

packages/Fody.6.7.0/netstandardtask/Mono.Cecil.Pdb.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

packages/EntityFramework.6.4.4/tools/net45/win-x86/ef6.exe
Size

76KB
MD5

9eb807e9aba74a268d43425d637efde3
SHA1

353b6266516b065abe6f841898ce2e53927d3bb5
SHA256

79a02d8f082ce5ee0abba0675ef6f8ec73f7f5d9722bc5e9729a232b0238307d
SHA512

33b0b786f0115dd2cd483cf65a6b31be4e4863f3ffa66172cdb85df61b50b8367094e16e561ce002e164c7a51ba1d048c37e9b37aea810402b9374e727ebd475
SSDEEP

768:d3CeFGz5SvioHSNiNGyzNCzZo7jZiawnouS9qPKAtkJ4Co4ghCQJalocCS6:5j+5SakSNwhPPNuSkCEnR4IJaloS6

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\packages\EntityFramework.6.4.4\tools\net45\win-x86\ef6.exe
"C:\Users\Admin\AppData\Local\Temp\packages\EntityFramework.6.4.4\tools\net45\win-x86\ef6.exe"
1⤵
PID:4384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4384-0-0x00000000736CE000-0x00000000736CF000-memory.dmp

Filesize
4KB

Download
memory/4384-1-0x00000000009D0000-0x00000000009E8000-memory.dmp

Filesize
96KB

Download