General
-
Target
Client-built.exe
-
Size
3.1MB
-
Sample
240606-nxqsfadf9s
-
MD5
2eac18132d5a2d8a22f13f0501614217
-
SHA1
9f245f4eeebe6453bd0cb20cac7816be6a3fd2f2
-
SHA256
d8538711014fff7a8fbe116e2ed843f03497976641d52e949b1c922496f5f52f
-
SHA512
8041db333b0629bb37f8fe44a9ee0136fdc9bce0acd1e57ebef7a6537398c421dd6a57815d29e0ca529f77684a1e632a64b63ef4804016db2289f47ec73803ae
-
SSDEEP
49152:7vRG42pda6D+/PjlLOlg6yQipVTwtKjJoLoGXBJTHHB72eh2NT:7vg42pda6D+/PjlLOlZyQipVTwt5
Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win7-20240220-en
Malware Config
Extracted
quasar
1.4.1
myquas2
totallylegit.duckdns.org:8888
216.238.78.129:8888
caa293c4-4d09-4239-87ae-8e10f33f71f3
-
encryption_key
D93687C0D77BAB971E7CA0A8526CEA34999D39E3
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Quasar Client Startup
-
subdirectory
SubDir
Targets
-
-
Target
Client-built.exe
-
Size
3.1MB
-
MD5
2eac18132d5a2d8a22f13f0501614217
-
SHA1
9f245f4eeebe6453bd0cb20cac7816be6a3fd2f2
-
SHA256
d8538711014fff7a8fbe116e2ed843f03497976641d52e949b1c922496f5f52f
-
SHA512
8041db333b0629bb37f8fe44a9ee0136fdc9bce0acd1e57ebef7a6537398c421dd6a57815d29e0ca529f77684a1e632a64b63ef4804016db2289f47ec73803ae
-
SSDEEP
49152:7vRG42pda6D+/PjlLOlg6yQipVTwtKjJoLoGXBJTHHB72eh2NT:7vg42pda6D+/PjlLOlZyQipVTwt5
-
Quasar payload
-