General

  • Target

    Quasar.rar

  • Size

    493KB

  • MD5

    f3631005ab6c37105fc50cc2fad89164

  • SHA1

    29fad49f974c8c9520c655d57f6812f5d2968754

  • SHA256

    5f04fe10293b3835f26d7555acf1f7dcca84862c9fa1406550d9a49db0bb38d1

  • SHA512

    69d0ac71ec7bbc0474cca7f8dcb184f56e70731c08fd8729e9a6791473d0c740af44400dd040d337def79f13246307fb4ab91e7818eb53f5278b3db7dca6b6ca

  • SSDEEP

    12288:bjCnYaqANMfWktSTGJ8Lkuxleoi9WG8o1TGgTMAL9sBzvQM:m0ANUYAskqgo4WGfYIBqzoM

Score
10/10

Malware Config

Extracted

Family

quasar

Attributes
  • reconnect_delay

    5000

Signatures

  • Quasar family
  • Quasar payload 1 IoCs
  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Quasar.rar
    .rar
  • Quasar/Mono.Cecil.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar/Mono.Nat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar/Quasar.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Quasar/Vestris.ResourceLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar/turingmachine.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections