General
-
Target
4712eecd80b2276aa79c444d165a0e6c6a3ab0d7f535afad704efc7519bff00d
-
Size
3.1MB
-
Sample
241208-16feaavney
-
MD5
952c395d389a3bdc237c944bf1331b60
-
SHA1
5fc20754fdd26e2f115dfe13b88762131fe8533f
-
SHA256
4712eecd80b2276aa79c444d165a0e6c6a3ab0d7f535afad704efc7519bff00d
-
SHA512
8b486a2dce469638dc8e355b1581af65d109406eb1df015125b350f94cf8c2f83b6c91ba9f46decb67b6650a4d011236e212a41b1220d6aedde7070c5a8ee824
-
SSDEEP
49152:Vvht62XlaSFNWPjljiFa2RoUYIdqWhybRjPLoGddJfTHHB72eh2NTv:VvL62XlaSFNWPjljiFXRoUYIdqWhWTO
Behavioral task
behavioral1
Sample
4712eecd80b2276aa79c444d165a0e6c6a3ab0d7f535afad704efc7519bff00d.exe
Resource
win7-20240903-en
Malware Config
Extracted
quasar
1.4.1
Office04
192.168.0.17:5555
3b1732e2-6a81-44bb-8d99-4472451b1cf3
-
encryption_key
871AD53C1EE1C8F197D53D3E1DCA45CC62B82B8D
-
install_name
javaconfig.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
JavaUpdater
-
subdirectory
SubDir
Targets
-
-
Target
4712eecd80b2276aa79c444d165a0e6c6a3ab0d7f535afad704efc7519bff00d
-
Size
3.1MB
-
MD5
952c395d389a3bdc237c944bf1331b60
-
SHA1
5fc20754fdd26e2f115dfe13b88762131fe8533f
-
SHA256
4712eecd80b2276aa79c444d165a0e6c6a3ab0d7f535afad704efc7519bff00d
-
SHA512
8b486a2dce469638dc8e355b1581af65d109406eb1df015125b350f94cf8c2f83b6c91ba9f46decb67b6650a4d011236e212a41b1220d6aedde7070c5a8ee824
-
SSDEEP
49152:Vvht62XlaSFNWPjljiFa2RoUYIdqWhybRjPLoGddJfTHHB72eh2NTv:VvL62XlaSFNWPjljiFXRoUYIdqWhWTO
-
Quasar family
-
Quasar payload
-
Executes dropped EXE
-