Overview

overview

10

Static

static

10

Artic-Tool...tic.py

windows10-1703-x64

3

Artic-Tool...12.pyc

windows10-1703-x64

3

Artic-Tool... 2.exe

windows10-1703-x64

10

Artic-Tool...up.bat

windows10-1703-x64

1

Artic-Tool...rt.bat

windows10-1703-x64

1

Artic-Tool...t__.py

windows10-1703-x64

3

Artic-Tool...12.pyc

windows10-1703-x64

3

Artic-Tool...12.pyc

windows10-1703-x64

3

Artic-Tool...12.pyc

windows10-1703-x64

3

Artic-Tool...12.pyc

windows10-1703-x64

3

Artic-Tool...12.pyc

windows10-1703-x64

3

Artic-Tool...12.pyc

windows10-1703-x64

3

Artic-Tool...12.pyc

windows10-1703-x64

3

Artic-Tool...12.pyc

windows10-1703-x64

3

Artic-Tool...12.pyc

windows10-1703-x64

3

Artic-Tool...12.pyc

windows10-1703-x64

3

Artic-Tool...12.pyc

windows10-1703-x64

3

Artic-Tool...12.pyc

windows10-1703-x64

3

Artic-Tool...12.pyc

windows10-1703-x64

3

Artic-Tool...12.pyc

windows10-1703-x64

3

Artic-Tool...12.pyc

windows10-1703-x64

3

Artic-Tool...12.pyc

windows10-1703-x64

3

Artic-Tool...les.py

windows10-1703-x64

3

Artic-Tool...mer.py

windows10-1703-x64

3

Artic-Tool...ger.py

windows10-1703-x64

3

Artic-Tool...ort.py

windows10-1703-x64

3

Artic-Tool...mer.py

windows10-1703-x64

3

Artic-Tool...ger.py

windows10-1703-x64

3

Artic-Tool...ker.py

windows10-1703-x64

3

Artic-Tool...ker.py

windows10-1703-x64

3

Artic-Tool...ner.py

windows10-1703-x64

3

Artic-Tool...ver.py

windows10-1703-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Artic-Tools-main.zip
  • Size 3.3MB
  • Sample240708-dsawbasbnh
  • SHA256 10478f357fce33e3022657700b14d357f727880a2c9f12802f244054a94bfbfd
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
office04quasar

Malware Config

Extracted

Family

  • quasar

Version

  • 1.4.1

Botnet

  • Office04

C2

  • 192.168.0.220:4782

Mutex

  • c6c343f8-8382-4a66-9b65-94ac25db16e4

Attributes
  • encryption_key

    E93DA55A12FC3EE59E1A5D2106636D62B1953227

  • install_name

    setup_2.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 2 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Artic-Tools-main.zip
    .zip 3.3MB
  • Artic-Tools-main/.github/FUNDING.yml
    663B
  • Artic-Tools-main/.github/ISSUE_TEMPLATE/bug_report.md
    834B
  • Artic-Tools-main/.github/ISSUE_TEMPLATE/feature_request.md
    595B
  • Artic-Tools-main/.gitignore
    223B
  • Artic-Tools-main/Artic.py
    8KB
  • Artic-Tools-main/CODE_OF_CONDUCT.md
    5KB
  • Artic-Tools-main/LICENSE
    34KB
  • Artic-Tools-main/README.md
    5KB
  • Artic-Tools-main/__pycache__/Xvirus.cpython-312.pyc
    16KB
  • Artic-Tools-main/requirements.txt
    31B
  • Artic-Tools-main/setup 2.exe
    .exe 3.1MB
  • Artic-Tools-main/setup.bat
    62B
  • Artic-Tools-main/start.bat
    22B
  • Artic-Tools-main/util/__init__.py
    702B
  • Artic-Tools-main/util/__pycache__/__init__.cpython-312.pyc
    860B
  • Artic-Tools-main/util/options/__pycache__/bypass_rules.cpython-312.pyc
    1KB
  • Artic-Tools-main/util/options/__pycache__/channel_spammer.cpython-312.pyc
    8KB
  • Artic-Tools-main/util/options/__pycache__/hypesquad_changer.cpython-312.pyc
    1KB
  • Artic-Tools-main/util/options/__pycache__/mass_report.cpython-312.pyc
    1KB
  • Artic-Tools-main/util/options/__pycache__/soundboard_spammer.cpython-312.pyc
    2KB
  • Artic-Tools-main/util/options/__pycache__/token_bio_changer.cpython-312.pyc
    1KB
  • Artic-Tools-main/util/options/__pycache__/token_checker.cpython-312.pyc
    4KB
  • Artic-Tools-main/util/options/__pycache__/token_global_nicker.cpython-312.pyc
    1KB
  • Artic-Tools-main/util/options/__pycache__/token_joiner.cpython-312.pyc
    1KB
  • Artic-Tools-main/util/options/__pycache__/token_leaver.cpython-312.pyc
    1KB
  • Artic-Tools-main/util/options/__pycache__/token_pron_changer.cpython-312.pyc
    2KB
  • Artic-Tools-main/util/options/__pycache__/token_saver.cpython-312.pyc
    6KB
  • Artic-Tools-main/util/options/__pycache__/token_server_nicker.cpython-312.pyc
    1KB
  • Artic-Tools-main/util/options/__pycache__/token_typer.cpython-312.pyc
    1KB
  • Artic-Tools-main/util/options/__pycache__/webhook_tool.cpython-312.pyc
    3KB
  • Artic-Tools-main/util/options/bypass_rules.py
    797B
  • Artic-Tools-main/util/options/channel_spammer.py
    4KB
  • Artic-Tools-main/util/options/hypesquad_changer.py
    848B
  • Artic-Tools-main/util/options/mass_report.py
    1KB
  • Artic-Tools-main/util/options/soundboard_spammer.py
    1KB
  • Artic-Tools-main/util/options/token_bio_changer.py
    652B
  • Artic-Tools-main/util/options/token_checker.py
    2KB
  • Artic-Tools-main/util/options/token_global_nicker.py
    668B
  • Artic-Tools-main/util/options/token_joiner.py
    914B
  • Artic-Tools-main/util/options/token_leaver.py
    708B
  • Artic-Tools-main/util/options/token_pron_changer.py
    1KB
  • Artic-Tools-main/util/options/token_saver.py
    3KB
  • Artic-Tools-main/util/options/token_server_nicker.py
    740B
  • Artic-Tools-main/util/options/token_typer.py
    771B
  • Artic-Tools-main/util/options/webhook_tool.py
    1KB
  • Artic-Tools-main/util/plugins/__pycache__/settings.cpython-312.pyc
    6KB
  • Artic-Tools-main/util/plugins/__pycache__/utils.cpython-312.pyc
    28KB
  • Artic-Tools-main/util/plugins/settings.py
    3KB
  • Artic-Tools-main/util/plugins/utils.py
    17KB

Artic-Tools-main.zip

  • SHA256 10478f357fce33e3022657700b14d357f727880a2c9f12802f244054a94bfbfd
  • MD5 SHA1 SHA512 SSDEEP

  • Quasar payload