General

  • Target

    Quasar Golden Edition 1.4.1.0.zip

  • Size

    10.6MB

  • MD5

    ab66bf6e04973621114e882834c91178

  • SHA1

    b7a745de1aaa1b09d6aba7cb70d8ced0e61f2177

  • SHA256

    79a52cb25a58cf08e11b46bc743cea2df4d5097bf1c80d5ec58c1abd2015b5a8

  • SHA512

    94778e81709c9433defebcc1757433af37cf9a7e47f0c502b278e96d2e1d693b896983f58fa9b65186c252f4aafaee3ea55c8ac27030645c97e36a86536bbbfb

  • SSDEEP

    196608:U5n78s8cBvZ4ISqnlxnt4y13PJnLAF3jBnzwbRLCGDllyi0jLunn2:U1x8c8Itnl1TxA3VnzwtLzl70/N

Score
10/10

Malware Config

Extracted

Family

quasar

Attributes
  • reconnect_delay

    5000

Signatures

  • Quasar family
  • Quasar payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 13 IoCs

    Checks for missing Authenticode signature.

Files

  • Quasar Golden Edition 1.4.1.0.zip
    .zip
  • Quasar Golden Edition 1.4.1.0/Include/NCC2.dll
    .dll windows:5 windows x86 arch:x86

    f4d8783cad3f11045aa4e2ccd348ec7b


    Headers

    Imports

    Exports

    Sections

  • Quasar Golden Edition 1.4.1.0/Include/NCC3.dll
    .dll windows:5 windows x86 arch:x86

    7520e044195b1728541d87932e3d3d25


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Quasar Golden Edition 1.4.1.0/Include/NCCheck.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Quasar Golden Edition 1.4.1.0/Include/VS08ReactorAddin.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar Golden Edition 1.4.1.0/Include/VS13ReactorAddin.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar Golden Edition 1.4.1.0/Include/VSReactorAddin.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar Golden Edition 1.4.1.0/Include/dotNET_Reactor.Console.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Quasar Golden Edition 1.4.1.0/Include/dotNET_Reactor.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Quasar Golden Edition 1.4.1.0/Include/dotNET_Reactor.exe.config
  • Quasar Golden Edition 1.4.1.0/Include/icon.ico
  • Quasar Golden Edition 1.4.1.0/Include/mpress.exe
    .exe windows:4 windows x86 arch:x86

    51e7ef6b1d43d0d05d7109dee9789560


    Headers

    Imports

    Sections

  • Quasar Golden Edition 1.4.1.0/Include/nrcfg.ico
  • Quasar Golden Edition 1.4.1.0/Include/reactor.nrcfg
  • Quasar Golden Edition 1.4.1.0/Mono.Cecil.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar Golden Edition 1.4.1.0/Mono.Nat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar Golden Edition 1.4.1.0/Quasar Golden Editionx.exe
    .exe windows:5 windows x64 arch:x64

    77d45b1ee20c3b020c48ab42d23ce5ef


    Headers

    Imports

    Sections

  • Quasar Golden Edition 1.4.1.0/Vestris.ResourceLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Quasar Golden Edition 1.4.1.0/client.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections