General
-
Target
Fatal - Free.exe
-
Size
3.1MB
-
Sample
240606-v1qeeaab94
-
MD5
c0de0f57c69ae9b5aa1ce38896e14fd0
-
SHA1
e89157053a1af663cc465069ba6fc069813b2753
-
SHA256
76de148ac9b1a4f05355202bc129130af14f507a9de7662015227b911cd73941
-
SHA512
9389f777a1d8c864fbe25f92c0e79d87918cd8097b0cf3000534b82c5b8860cec5d81e4179a5ee90c4e43b997af2c1aef6447187a2f9570cd9bb256a231c2141
-
SSDEEP
49152:Wvkt62XlaSFNWPjljiFa2RoUYIvz7zQhoGd1gTHHB72eh2NT:Wv462XlaSFNWPjljiFXRoUYIvz7zi
Behavioral task
behavioral1
Sample
Fatal - Free.exe
Resource
win7-20240215-en
Malware Config
Extracted
quasar
1.4.1
Office04
192.168.3.37:4782
f92406d0-04ae-497d-aa31-b25c24b863d2
-
encryption_key
FD81B8715CDDADAE86DD8D24006A755C171092F8
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Fatal - Free
-
subdirectory
SubDir
Targets
-
-
Target
Fatal - Free.exe
-
Size
3.1MB
-
MD5
c0de0f57c69ae9b5aa1ce38896e14fd0
-
SHA1
e89157053a1af663cc465069ba6fc069813b2753
-
SHA256
76de148ac9b1a4f05355202bc129130af14f507a9de7662015227b911cd73941
-
SHA512
9389f777a1d8c864fbe25f92c0e79d87918cd8097b0cf3000534b82c5b8860cec5d81e4179a5ee90c4e43b997af2c1aef6447187a2f9570cd9bb256a231c2141
-
SSDEEP
49152:Wvkt62XlaSFNWPjljiFa2RoUYIvz7zQhoGd1gTHHB72eh2NT:Wv462XlaSFNWPjljiFXRoUYIvz7zi
-
Quasar payload
-
Executes dropped EXE
-