General
-
Target
discord ip grabber setup.exe
-
Size
3.1MB
-
Sample
240608-1hdwjshd79
-
MD5
125f0ea22dfd428a7f63bdca9049e089
-
SHA1
b1850e5701416ffd91d6a05058af265a02ebbcdf
-
SHA256
3d5f49779d8e932ed12ea1db7b60cdf49b1aa909cc30a279a8732332af274f4d
-
SHA512
7a830485cb848c1888705a7519c4dc09ce84ee8a87f282917687077ca97b1b448e9a4a2384b44f22e2cc061e3f75b1cdaf8a36953c00dd282aaf14950c1f2c2b
-
SSDEEP
49152:yviI22SsaNYfdPBldt698dBcjHD4mAmzXLoGdqETHHB72eh2NT:yvv22SsaNYfdPBldt6+dBcjHD4mda
Behavioral task
behavioral1
Sample
discord ip grabber setup.exe
Resource
win7-20240221-en
Malware Config
Extracted
quasar
1.4.1
image
192.168.0.108:4782
3238cac0-2b8d-4786-98d4-94ba3b0d3169
-
encryption_key
6E340CD4BC59938B28E8EDCB44F294C2659196F8
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
antivirus startup
-
subdirectory
SubDir
Targets
-
-
Target
discord ip grabber setup.exe
-
Size
3.1MB
-
MD5
125f0ea22dfd428a7f63bdca9049e089
-
SHA1
b1850e5701416ffd91d6a05058af265a02ebbcdf
-
SHA256
3d5f49779d8e932ed12ea1db7b60cdf49b1aa909cc30a279a8732332af274f4d
-
SHA512
7a830485cb848c1888705a7519c4dc09ce84ee8a87f282917687077ca97b1b448e9a4a2384b44f22e2cc061e3f75b1cdaf8a36953c00dd282aaf14950c1f2c2b
-
SSDEEP
49152:yviI22SsaNYfdPBldt698dBcjHD4mAmzXLoGdqETHHB72eh2NT:yvv22SsaNYfdPBldt6+dBcjHD4mda
-
Quasar payload
-