General
- Target Client-built.exe
- Size 3.1MB
- Sample240907-dnjyessann
- SHA256 b9e61655a5231bc7226473309d0253bd670ca0aa01da8ed85fa755ec78ec137d
- MD5 1bc41e78ed5826263d2a19ead5a4c745
- SHA1 abd595914243e2e2f820aa79bb3b8291a238b212
- SHA512 2cb7077de8174fef7bc96bd609a64ee577af2c3cb52b1e53a5b489c4aa742f177fa0214ded4b192d9ea1b07155bd29b0604b6e677223495ee15fad99f1cf2b49
- SSDEEP 49152:dvA6yZwSeR9AvRYgOHPv27OsAuTRTHHB72eh2NT:dv+wH9ApY9HPOq
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win7-20240903-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
quasar
Version
-
1.4.1
Botnet
-
Office04
C2
-
45.131.111.80:4343
Mutex
-
acba47bc-0059-4de1-903e-ddf73d586598
Attributes
-
encryption_key
A4A396F63CB98678D936806D746F527FED43A46F
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Quasar Client Startup
-
subdirectory
SubDir
Targets
-
- Target Client-built.exe
- Size 3.1MB
- SHA256 b9e61655a5231bc7226473309d0253bd670ca0aa01da8ed85fa755ec78ec137d
- MD5 1bc41e78ed5826263d2a19ead5a4c745
- SHA1 abd595914243e2e2f820aa79bb3b8291a238b212
- SHA512 2cb7077de8174fef7bc96bd609a64ee577af2c3cb52b1e53a5b489c4aa742f177fa0214ded4b192d9ea1b07155bd29b0604b6e677223495ee15fad99f1cf2b49
- SSDEEP 49152:dvA6yZwSeR9AvRYgOHPv27OsAuTRTHHB72eh2NT:dv+wH9ApY9HPOq
- MD5 SHA1 SHA512 SSDEEP
Quasar payload