General
-
Target
Client-built.exe
-
Size
3.1MB
-
Sample
241003-l6a28szflc
-
MD5
b382cc9bd6743631d202ee9388196981
-
SHA1
ada683921b83da1066f4c20d2b20731d529c873f
-
SHA256
5101cb04c38770287a16423f43e9ce5fdd8aa8511f4b0f464df1f3fcc9bb0a80
-
SHA512
165f09922121dceffbf6af969038bc6a320a3a7dc7ba95f8369a23a43f905c885942b0ad707c98ade09da9a6ca479e4d3fe1e859bcc8c94c11d95f59bb4a98d1
-
SSDEEP
49152:mvht62XlaSFNWPjljiFa2RoUYIFkxT1v1LoGQPTHHB72eh2NT:mvL62XlaSFNWPjljiFXRoUYIFkxH
Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win7-20240903-en
Malware Config
Extracted
quasar
1.4.1
Test
127.0.0.1:4782
bd6c3b1d-6aa7-4e42-9f88-ac99d54904d9
-
encryption_key
63667F73F7CDD8FC0A2474F0D1CB5D2D071D6D70
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Quasar Client Startup
-
subdirectory
SystemFile
Targets
-
-
Target
Client-built.exe
-
Size
3.1MB
-
MD5
b382cc9bd6743631d202ee9388196981
-
SHA1
ada683921b83da1066f4c20d2b20731d529c873f
-
SHA256
5101cb04c38770287a16423f43e9ce5fdd8aa8511f4b0f464df1f3fcc9bb0a80
-
SHA512
165f09922121dceffbf6af969038bc6a320a3a7dc7ba95f8369a23a43f905c885942b0ad707c98ade09da9a6ca479e4d3fe1e859bcc8c94c11d95f59bb4a98d1
-
SSDEEP
49152:mvht62XlaSFNWPjljiFa2RoUYIFkxT1v1LoGQPTHHB72eh2NT:mvL62XlaSFNWPjljiFXRoUYIFkxH
-
Quasar payload
-
Executes dropped EXE
-