General

  • Target

    https://gofile.io/d/7m8p6f

  • Sample

    241009-avq4jatekj

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

test

C2

luascript-28488.portmap.host:28488

Mutex

0be49127-6a01-4931-8d7c-84035856367f

Attributes
  • encryption_key

    61968CB017546A59BB42F884A73D1899C4140210

  • install_name

    celexv2.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    .

  • subdirectory

    SubDir

Targets

MITRE ATT&CK Enterprise v15

Tasks