Analysis
-
max time kernel
101s -
max time network
140s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20241023-en -
resource tags
arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system -
submitted
12-11-2024 22:44
General
-
Target
Client.exe
-
Size
12.3MB
-
MD5
49fee9e45690cb2d12f32923ff5c7060
-
SHA1
eaa52d56f0998b81bd54397d0d0d0c68d47e4838
-
SHA256
4bcc56b8279bc707e0f6a21a9fddc8c67903383f84ba1bc0477b8327ab370719
-
SHA512
e08c1fb1b1fb76dd6b6d768b397ca7b20bba1aa54affee551e248830ccf8bbf8957e888eb88be4725c047b52c592d13ebae1218771699739c31bcfb43f9d9390
-
SSDEEP
393216:oTHuJuMZfRcpDfuSkqJc5YYR4FjlHN4Ol:KHJY5c1uSkqJc5l6ZtP
Malware Config
Signatures
-
Quasar family
-
Quasar payload 1 IoCs
Processes:
resource yara_rule behavioral1/memory/1152-1-0x0000000000E70000-0x0000000001ACE000-memory.dmp family_quasar -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes:
Client.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Client.exe