General

  • Target

    https://gofile.io/d/04QQTQ

  • Sample

    241211-1dvnhayqd1

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

c0nvar

C2

10.0.2.15:4782

Mutex

f3209204-2527-44bd-9a26-2cffd3e33367

Attributes
  • encryption_key

    5316134D3D004512946441D81B03C1383BD4BF32

  • install_name

    Windows-Defender.exe

  • log_directory

    WindowsDiagnostics

  • reconnect_delay

    3000

  • startup_key

    Windows Diagnostics

  • subdirectory

    Defender

Targets

MITRE ATT&CK Enterprise v15

Tasks