General
-
Target
https://google.com
-
Sample
241026-yv5tpawpfy
Score
10/10
Malware Config
Extracted
Family
quasar
Version
1.4.1
Botnet
Office04
C2
10.127.0.1:4782
Mutex
55661b8a-e017-4e98-8273-d0d23322c4d7
Attributes
-
encryption_key
9B150D64E0D6AFA77FF47890390D196C24E0B11D
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Quasar Client Startup
-
subdirectory
SubDir
Targets
-
-
Target
https://google.com
Score10/10-
Quasar RAT
Quasar is an open source Remote Access Tool.
-
Quasar family
-
Quasar payload
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-