Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Client-built.exe

windows7-x64

10

Client-built.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Client-built.exe

  • Size

    3.1MB

  • MD5

    1e95dbf3d51282ba1c6c455072db3853

  • SHA1

    62460f6c11bdf66f5180fd06cf50bb6cc1b342f4

  • SHA256

    ac67ed61a6bb0d7db50756f4dbacdb56ed90755f1d9e693d9e3650445b271474

  • SHA512

    965720b3bfaa906748d9fc75d6688fd438245a404724b07aa69282030167559007e0133bf2e5ede8476e15ea8c3d556ecf10d8658ee7d6ccc8d1d73f128232b1

  • SSDEEP

    49152:DvulL26AaNeWgPhlmVqvMQ7XSKCO/RJ6mbR3LoGdQTHHB72eh2NT:DveL26AaNeWgPhlmVqkQ7XSKCO/RJ6g

Score
10/10
treyquasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

trey

C2

problems-estimation.gl.at.ply.gg:23158

Mutex

108c9f83-3a30-4ea4-82a6-924c2fb96505

Attributes
  • encryption_key

    3C4A7FEC35CCD9EF97E67742362289CDF4B0B0AE

  • install_name

    trey.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    trey

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client-built.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.