General
-
Target
Client-built.rar
-
Size
1.0MB
-
Sample
240723-qk8htsvejc
-
MD5
4cb2e6bfa10fbda4f7a9181277f0629b
-
SHA1
f48f8e7f278baf99aacfe4f7a7ff14b7051b31dd
-
SHA256
7b4615b88c2b5f0c4386fbcbed94698258635a519b1e2a63eee7c52fa45a1c04
-
SHA512
27fec84970691c9bd67a349d3e1ee51b9ce12832c43ce8f1e5e2e5380b79fc848a5f1a4b3cd0d3a31681d02157b3129512fd33bc72fa26158380a250f0296091
-
SSDEEP
24576:LrCp9MX3heGR/c6DcYwBlW2a2s2Xpiir22MI:nCy3k2U6DcYwBlWpzkfMI
Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win10-20240404-en
Malware Config
Extracted
quasar
1.4.1
Office04
192.168.1.4:4782
7e7eefb0-bbcf-4b86-acd2-8a3675af71f2
-
encryption_key
850E5D08EE2F98145C3742B9BDCCD637E6DD2097
-
install_name
taskhost.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
taskhost
-
subdirectory
SKR
Targets
-
-
Target
Client-built.exe
-
Size
3.1MB
-
MD5
39bf77938932902a452a7f79e3a392d5
-
SHA1
6fa01f25e1211ebefbbe9a4cccef4223cfbba1ea
-
SHA256
07d3041cc1e083636c50da63eba0582f2a3b169b26a6bc3c155e90c126c6c3a0
-
SHA512
5805d811f47ed1f423d9043a6652d0f9c52e2a9e56d156da4d24061d8ab840220a4059e094218a421f5e2b5d66234e3a83c6fe4962b5dde3b2b7a03e147ad0dd
-
SSDEEP
49152:uvkt62XlaSFNWPjljiFa2RoUYI9sn85BbRULoGdVzSTHHB72eh2NT:uv462XlaSFNWPjljiFXRoUYI9sn85i
-
Quasar payload
-
Executes dropped EXE
-