adb9349916189a54ff66650eacd0db73ed931be39e4118f78d21d24b2b8932b4

Submit
Reports

Overview

overview

Static

static

Quasar-master.7z

windows10-1703-x64

Quasar.Ser...ner.cs

windows10-1703-x64

Quasar.Ser...Add.cs

windows10-1703-x64

Quasar.Ser...ner.cs

windows10-1703-x64

Quasar.Ser...ner.cs

windows10-1703-x64

Quasar.Ser...ner.cs

windows10-1703-x64

Quasar.Ser...ger.cs

windows10-1703-x64

Quasar.Ser...ter.cs

windows10-1703-x64

Quasar.Ser...per.cs

windows10-1703-x64

Quasar.Ser...per.cs

windows10-1703-x64

Quasar.Ser...me.xml

windows10-1703-x64

Quasar.Ser...ar.pdb

windows10-1703-x64

Quasar.Ser....cache

windows10-1703-x64

Quasar.Ser...c.json

windows10-1703-x64

Quasar.Ser....props

windows10-1703-x64

Quasar.Ser...argets

windows10-1703-x64

Quasar.Ser...me.xml

windows10-1703-x64

Quasar.sln

windows10-1703-x64

packages/D....nupkg

windows10-1703-x64

packages/E....nupkg

windows10-1703-x64

packages/E...S2.ps1

windows10-1703-x64

packages/E...k6.ps1

windows10-1703-x64

packages/E...it.ps1

windows10-1703-x64

packages/E...ll.ps1

windows10-1703-x64

packages/E...f6.exe

windows10-1703-x64

packages/E...f6.exe

windows10-1703-x64

packages/E...f6.exe

windows10-1703-x64

packages/E...f6.exe

windows10-1703-x64

packages/F...rs.dll

windows10-1703-x64

packages/F...db.dll

windows10-1703-x64

packages/F...rs.dll

windows10-1703-x64

packages/F...db.dll

windows10-1703-x64

Analysis

max time kernel
107s
max time network
136s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
21-05-2024 00:01

Sharing

Copy URL

Twitter E-mail

Static task

static1

quasar

3 signatures

Behavioral task

behavioral1

Sample

Quasar-master.7z

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

Quasar.Server/Forms/FrmStartupAdd.Designer.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral3

Sample

Quasar.Server/Forms/FrmStartupAdd.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

Quasar.Server/Forms/FrmStartupManager.Designer.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

Quasar.Server/Forms/FrmSystemInformation.Designer.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

Quasar.Server/Forms/FrmTaskManager.Designer.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

Quasar.Server/Forms/FrmTaskManager.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

Quasar.Server/Helper/LogsViewUpdater.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

Quasar.Server/Helper/NativeMethodsHelper.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral10

Sample

Quasar.Server/Helper/WindowHelper.cs

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral11

Sample

Quasar.Server/obj/Debug/net452/Quasar.exe.withSupportedRuntime.xml

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

Quasar.Server/obj/Debug/net452/Quasar.pdb

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

Quasar.Server/obj/Debug/net47/Quasar.Server.assets.cache

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

Quasar.Server/obj/Quasar.Server.csproj.nuget.dgspec.json

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

Quasar.Server/obj/Quasar.Server.csproj.nuget.g.props

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral16

Sample

Quasar.Server/obj/Quasar.Server.csproj.nuget.g.targets

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral17

Sample

Quasar.Server/obj/Release/net452/Quasar.exe.withSupportedRuntime.xml

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

Quasar.sln

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral19

Sample

packages/DotNetZip.Reduced.1.9.1.8/DotNetZip.Reduced.1.9.1.8.nupkg

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral20

Sample

packages/EntityFramework.6.4.4/EntityFramework.6.4.4.nupkg

Resource

win10-20240404-en

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral21

Sample

packages/EntityFramework.6.4.4/tools/EntityFramework6.PS2.ps1

Resource

win10-20240404-en

execution

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral22

Sample

packages/EntityFramework.6.4.4/tools/EntityFramework6.ps1

Resource

win10-20240404-en

execution

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral23

Sample

packages/EntityFramework.6.4.4/tools/init.ps1

Resource

win10-20240404-en

execution

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

packages/EntityFramework.6.4.4/tools/install.ps1

Resource

win10-20240404-en

execution

windows10-1703-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

packages/EntityFramework.6.4.4/tools/net40/any/ef6.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

packages/EntityFramework.6.4.4/tools/net40/win-x86/ef6.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

packages/EntityFramework.6.4.4/tools/net45/win-x86/ef6.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

packages/EntityFramework.6.4.4/tools/netcoreapp3.0/any/ef6.exe

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral29

Sample

packages/Fody.6.7.0/netclassictask/FodyHelpers.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

packages/Fody.6.7.0/netclassictask/Mono.Cecil.Pdb.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

packages/Fody.6.7.0/netstandardtask/FodyHelpers.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Behavioral task

behavioral32

Sample

packages/Fody.6.7.0/netstandardtask/Mono.Cecil.Pdb.dll

Resource

win10-20240404-en

windows10-1703-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

packages/EntityFramework.6.4.4/tools/netcoreapp3.0/any/ef6.exe
Size

87KB
MD5

41d4334599845313e77329962a1d033c
SHA1

1adde2be8aa288463f7dbb757f8c0c3e4920c070
SHA256

1d8abd7a78652ee65a856840d8ae04f74be59e7102f23cc0c0f39dd174cdcbb0
SHA512

92a083b5707a1160e91e9b85e05e4344b1c3f068f19cfacdeca1180218b6a882d3b59cf01bd7ee2a62c312298c475c793164fc5c0a6cfda7fce9d5dae65e05aa
SSDEEP

1536:ZzkPyzX7L4M58omeJllllll8llMWu2rXvFoJz29+0HMqrJaAHu3WL:tmyz3koJOMqFpHL

Score

1^/10

Malware Config

Signatures

Processes

C:\Users\Admin\AppData\Local\Temp\packages\EntityFramework.6.4.4\tools\netcoreapp3.0\any\ef6.exe
"C:\Users\Admin\AppData\Local\Temp\packages\EntityFramework.6.4.4\tools\netcoreapp3.0\any\ef6.exe"
1⤵
PID:4816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4816-1-0x00007FFC5D583000-0x00007FFC5D584000-memory.dmp

Filesize
4KB

Download
memory/4816-0-0x0000023E9C360000-0x0000023E9C37A000-memory.dmp

Filesize
104KB

Download