Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c73495d518939c19cb7ec241438cc09290ec30277e5b23a9ba1ae081e877f8fa
-
Size
3.1MB
-
Sample
240807-ax9zesvhnn
-
MD5
c11c864a5dd7d5e14774526c50cc00ad
-
SHA1
3e5f934fc2b198a1b8633e4f38536d9b373f91de
-
SHA256
c73495d518939c19cb7ec241438cc09290ec30277e5b23a9ba1ae081e877f8fa
-
SHA512
63a6acf766f1655c3b48b2b625ffeb5600a923c51d689e5ffac4bcb9ebd5d47ef5805c1b2be3b55554a3c514b0d78533adf5d709f086efab1df332262ed149e6
-
SSDEEP
49152:wHobtR1o2PmNXo7WCr0oC4Rw8FXbrYdECTHHB72eh2NT:wHmRvmNXo7WCr0Sw8Z
Behavioral task
behavioral1
Sample
c73495d518939c19cb7ec241438cc09290ec30277e5b23a9ba1ae081e877f8fa.exe
Resource
win7-20240705-en
Malware Config
Extracted
quasar
1.4.1
23223
147.185.221.18:42996
147.185.221.18:1770
a3667327-19d1-445f-b8b9-5903e733fb58
-
encryption_key
9E968F05BD874BA1BE086FD1774A027473823F49
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Quasar Client Startup
-
subdirectory
SubDir
Targets
-
-
Target
c73495d518939c19cb7ec241438cc09290ec30277e5b23a9ba1ae081e877f8fa
-
Size
3.1MB
-
MD5
c11c864a5dd7d5e14774526c50cc00ad
-
SHA1
3e5f934fc2b198a1b8633e4f38536d9b373f91de
-
SHA256
c73495d518939c19cb7ec241438cc09290ec30277e5b23a9ba1ae081e877f8fa
-
SHA512
63a6acf766f1655c3b48b2b625ffeb5600a923c51d689e5ffac4bcb9ebd5d47ef5805c1b2be3b55554a3c514b0d78533adf5d709f086efab1df332262ed149e6
-
SSDEEP
49152:wHobtR1o2PmNXo7WCr0oC4Rw8FXbrYdECTHHB72eh2NT:wHmRvmNXo7WCr0Sw8Z
-
Quasar payload
-