General

  • Target

    Quasar.v1.4.1.zip

  • Size

    3.3MB

  • MD5

    13aa4bf4f5ed1ac503c69470b1ede5c1

  • SHA1

    c0b7dadff8ac37f6d9fd00ae7f375e12812bfc00

  • SHA256

    4cdeb2eae1cec1ab07077142313c524e9cf360cdec63497538c4405c2d8ded62

  • SHA512

    767b03e4e0c2a97cb0282b523bcad734f0c6d226cd1e856f6861e6ae83401d0d30946ad219c8c5de3c90028a0141d3dc0111c85e0a0952156cf09e189709fa7d

  • SSDEEP

    49152:lYLmNgMh/9yUsRFeWMyYISDSwtfxZQNemi57PdHmeFINp/lFnsDbNFNepL6DJo+J:mL9U1yUUQykOQ91XFYBlR8P9d5uNJo9

Score
10/10

Malware Config

Extracted

Family

quasar

Attributes
  • reconnect_delay

    5000

Signatures

  • Quasar family
  • Quasar payload 3 IoCs
  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • Quasar.v1.4.1.zip
    .zip
  • Quasar v1.4.1/3rdPartyLicenses/Be.HexEditor_license.txt
  • Quasar v1.4.1/3rdPartyLicenses/BouncyCastle_license.html
    .html
  • Quasar v1.4.1/3rdPartyLicenses/GlobalMouseKeyHook_license.txt
  • Quasar v1.4.1/3rdPartyLicenses/Mono.Cecil_license.txt
  • Quasar v1.4.1/3rdPartyLicenses/Open.Nat_license.txt
  • Quasar v1.4.1/3rdPartyLicenses/ResourceLib_license.txt
  • Quasar v1.4.1/3rdPartyLicenses/SilkIcons_license.txt
  • Quasar v1.4.1/3rdPartyLicenses/protobuf-net_license.txt
  • Quasar v1.4.1/BouncyCastle.Crypto.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Quasar v1.4.1/Gma.System.MouseKeyHook.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar v1.4.1/LICENSE
  • Quasar v1.4.1/Mono.Cecil.Mdb.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar v1.4.1/Mono.Cecil.Pdb.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar v1.4.1/Mono.Cecil.Rocks.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar v1.4.1/Mono.Cecil.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar v1.4.1/Open.Nat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar v1.4.1/Quasar.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar v1.4.1/Quasar.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Quasar v1.4.1/Quasar.exe.config
    .xml
  • Quasar v1.4.1/Vestris.ResourceLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar v1.4.1/client.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Quasar v1.4.1/protobuf-net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections