Overview

overview

10

Static

static

1

URLScan

urlscan

1

https://dosya.co/qp0...

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://dosya.co/qp0w0k7mllgh/remote.exe.html

  • Sample

    241025-xlmfba1kg1

Score
10/10
quasaroffice04discoveryspywaretrojan

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Office04

C2

192.168.72.128:4782

Arouwa-51976.portmap.host:51976
Mutex

aee623af-65d4-4b76-8d80-509b8dbb1af7

Attributes
  • encryption_key

    A2C1CBAC22B62E42E0DFDE9F6CA17AC9BD8355F1

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    CMD Client

  • subdirectory

    SubDir

Targets

MITRE ATT&CK Enterprise v15

Tasks