General
-
Target
81482c1a6d2f01cc87ef30cbc62dcaa2690a33868b2bb9b317419eec2bb28c39N.exe
-
Size
3.1MB
-
Sample
241119-zvllgsslgt
-
MD5
58a7b2b9800cd7e126a12869c63ab670
-
SHA1
118f54af16f09cdf086dfa6bf26f1903e3af471f
-
SHA256
81482c1a6d2f01cc87ef30cbc62dcaa2690a33868b2bb9b317419eec2bb28c39
-
SHA512
37bfe5f60cbed4f1e9972229a2ba6535a0f7573f036663fb0d3843f756fc1036b53823f60c3bffd3fd1f7652780bf6a47d8e006d72b030ff1632fb446ffa7448
-
SSDEEP
49152:Pv4t62XlaSFNWPjljiFa2RoUYIYkUh5BxgAoGd66THHB72eh2NT:PvU62XlaSFNWPjljiFXRoUYIYPh3K
Behavioral task
behavioral1
Sample
81482c1a6d2f01cc87ef30cbc62dcaa2690a33868b2bb9b317419eec2bb28c39N.exe
Resource
win7-20240903-en
Malware Config
Extracted
quasar
1.4.1
Office04
10.7.0.10:4782
0801129f-7edc-4409-8f35-6d3df26fe228
-
encryption_key
E378872B39AA37823907E666E3586D0C1F878A95
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
QUASAR Client Startup
-
subdirectory
SubDir
Targets
-
-
Target
81482c1a6d2f01cc87ef30cbc62dcaa2690a33868b2bb9b317419eec2bb28c39N.exe
-
Size
3.1MB
-
MD5
58a7b2b9800cd7e126a12869c63ab670
-
SHA1
118f54af16f09cdf086dfa6bf26f1903e3af471f
-
SHA256
81482c1a6d2f01cc87ef30cbc62dcaa2690a33868b2bb9b317419eec2bb28c39
-
SHA512
37bfe5f60cbed4f1e9972229a2ba6535a0f7573f036663fb0d3843f756fc1036b53823f60c3bffd3fd1f7652780bf6a47d8e006d72b030ff1632fb446ffa7448
-
SSDEEP
49152:Pv4t62XlaSFNWPjljiFa2RoUYIYkUh5BxgAoGd66THHB72eh2NT:PvU62XlaSFNWPjljiFXRoUYIYPh3K
-
Quasar family
-
Quasar payload
-
Executes dropped EXE
-