Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
test.exe
-
Size
3.1MB
-
Sample
240811-eqm9asycpa
-
MD5
ec2648334be2e631b82b1382a8940603
-
SHA1
12403c9ce6e026583d74ebf9a81b208103060bce
-
SHA256
b7c453f42f905823c106e6348871c9ad4b78e04e8bff7c3315d784797275687f
-
SHA512
eeb57f3af0b498e581c4c5704e6cf7603cbab4b754320717225394aa215a5575f1015de8831725a2da2f5d3dee7ac3499efae728a5082c25d7dd268d30558787
-
SSDEEP
49152:Pvht62XlaSFNWPjljiFa2RoUYIFlxNESEKk/i1LoGdfqXlTHHB72eh2NT:PvL62XlaSFNWPjljiFXRoUYIfxhNyX
Behavioral task
behavioral1
Sample
test.exe
Resource
win7-20240704-en
Malware Config
Extracted
quasar
1.4.1
Office04
192.168.2.51:65535
196fbb22-4fc3-4d2e-9e30-bd3ff8496cbf
-
encryption_key
62C0EDEB268B3897916B9C300A334C032152A1EA
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Python Updater
-
subdirectory
SubDir
Targets
-
-
Target
test.exe
-
Size
3.1MB
-
MD5
ec2648334be2e631b82b1382a8940603
-
SHA1
12403c9ce6e026583d74ebf9a81b208103060bce
-
SHA256
b7c453f42f905823c106e6348871c9ad4b78e04e8bff7c3315d784797275687f
-
SHA512
eeb57f3af0b498e581c4c5704e6cf7603cbab4b754320717225394aa215a5575f1015de8831725a2da2f5d3dee7ac3499efae728a5082c25d7dd268d30558787
-
SSDEEP
49152:Pvht62XlaSFNWPjljiFa2RoUYIFlxNESEKk/i1LoGdfqXlTHHB72eh2NT:PvL62XlaSFNWPjljiFXRoUYIfxhNyX
-
Quasar payload
-
Executes dropped EXE
-