General
-
Target
Client-built.exe
-
Size
3.1MB
-
Sample
240605-yc375sfe9t
-
MD5
6ed079e125e5cb44b9a356d7841b2552
-
SHA1
064a8b8f919bd991cb522b64ea8961b54a06eec1
-
SHA256
e3061316ff7828b9471979d0e50b64d9050c8c42de21fa4a4a2bb6d51c753a83
-
SHA512
f71124e41db02717981fea66a378368d11fe9606fdc343371a92d0748f4211dcc9ba5435ca5dba4cacbd31e39f1937cf0698334284b2535169d8fc2aed0e171d
-
SSDEEP
49152:KvOI22SsaNYfdPBldt698dBcjHwrxNESEsk/i2LoGd/THHB72eh2NT:Kvj22SsaNYfdPBldt6+dBcjHgxX4
Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win7-20240221-en
Malware Config
Extracted
quasar
1.4.1
Office04
142.161.90.171:5000
a7509023-1226-4493-880a-2f99c5fd7acf
-
encryption_key
42264509D6E4D45CA690ED3425881B1D02A87342
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Quasar Client Startup
-
subdirectory
SubDir
Targets
-
-
Target
Client-built.exe
-
Size
3.1MB
-
MD5
6ed079e125e5cb44b9a356d7841b2552
-
SHA1
064a8b8f919bd991cb522b64ea8961b54a06eec1
-
SHA256
e3061316ff7828b9471979d0e50b64d9050c8c42de21fa4a4a2bb6d51c753a83
-
SHA512
f71124e41db02717981fea66a378368d11fe9606fdc343371a92d0748f4211dcc9ba5435ca5dba4cacbd31e39f1937cf0698334284b2535169d8fc2aed0e171d
-
SSDEEP
49152:KvOI22SsaNYfdPBldt698dBcjHwrxNESEsk/i2LoGd/THHB72eh2NT:Kvj22SsaNYfdPBldt6+dBcjHgxX4
-
Quasar payload
-
Executes dropped EXE
-