General
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://file.io/kD2CqG0ENZXR
Resource
win10-20240404-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
https://file.io/kD2CqG0ENZXR
Resource
win10v2004-20240802-en
7 signatures
150 seconds
Malware Config
Extracted
Family
quasar
Version
1.4.1
Botnet
Office04
C2
192.168.1.22:4782
Mutex
57d3f047-3e8b-4879-8db0-23c48124b354
Attributes
-
encryption_key
DB3E8487FBE8EE3D16C608BB57026F5A245CCE9B
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Quasar Client Startup
-
subdirectory
SubDir
Targets
-
-
Quasar payload
-
Downloads MZ/PE file
-
Executes dropped EXE