General
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://gofile.io/d/Vw475K
Resource
win10v2004-20241007-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
https://gofile.io/d/Vw475K
Resource
win11-20241007-en
7 signatures
150 seconds
Malware Config
Extracted
Family
quasar
Version
1.4.1
Botnet
Office04
C2
192.168.1.28:4782
Mutex
03ef2b9a-5389-4312-b3d3-9b6f68cc5386
Attributes
-
encryption_key
F8A900CD75D848E74023B3A66FA8AA5469C97692
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
ahhaa
-
subdirectory
SubDir