General
-
Target
https://gofile.io/d/8XPtY5
-
Sample
240919-b2qa9athka
Score
10/10
Malware Config
Extracted
Family
quasar
Version
1.4.1
Botnet
kakaa3123
C2
192.168.2.20:4782
Mutex
4ff78f1c-5300-448a-97ab-142b1e64569e
Attributes
-
encryption_key
FEA9E0C3CFDA046F3213398E2016024F95FA226E
-
install_name
Horizon.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Quasar Client Startup
-
subdirectory
SubDir
Targets
-
-
Target
https://gofile.io/d/8XPtY5
Score10/10-
Quasar RAT
Quasar is an open source Remote Access Tool.
-
Quasar payload
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Drops file in System32 directory
-