General

  • Target

    https://github.com/Zezment/HwidChecker/blob/main/HwidChecker.exe

  • Sample

    240804-jyj9tszgql

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Office04

C2

10.0.0.91:4782

Mutex

9ed05a87-25fb-402e-a6a4-b613c5088d3d

Attributes
  • encryption_key

    1E317FE2D0D84B0CA0BFA596778B8CC9702863D6

  • install_name

    HwidChecker.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Targets

MITRE ATT&CK Enterprise v15

Tasks