Resubmissions

11-12-2024 21:19

241211-z6pghstjgq 10

11-12-2024 21:18

241211-z5x29synbz 3

General

  • Target

    https://gofile.io/d/FwnpgK

  • Sample

    241211-z6pghstjgq

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

c0nvar

C2

10.0.2.15:4782

Mutex

5f356d1d-9478-4b8b-bb7a-36cdaf711a22

Attributes
  • encryption_key

    5316134D3D004512946441D81B03C1383BD4BF32

  • install_name

    matcall.exe

  • log_directory

    WindowsDiagnostics

  • reconnect_delay

    3000

  • startup_key

    Microsoft Attribute Caller

  • subdirectory

    UserRequired

Targets

MITRE ATT&CK Enterprise v15

Tasks