General
-
Target
SerialChecker.exe
-
Size
3.1MB
-
Sample
241216-gxcggsypfl
-
MD5
70fa564a25bdd50a78764228f591f9a0
-
SHA1
2d025703005c25bc35b4755321844f3adc41c974
-
SHA256
9fda62581f43e3936e371ced328374f97a7ede2b9fff3748bf618977b1da495a
-
SHA512
ce33af378f45752148de566ec1281a4e212b5af8e9d9d942f833f8d35a5c5d84f8657f17dc053d4bd56ae6ea556122de8039d0cab8c37d6eb5af9f89041eaff3
-
SSDEEP
49152:Ovkt62XlaSFNWPjljiFa2RoUYIbnp9nr1oGdI2THHB72eh2NT:Ov462XlaSFNWPjljiFXRoUYI7p9nZ
Behavioral task
behavioral1
Sample
SerialChecker.exe
Resource
win7-20240903-en
Malware Config
Extracted
quasar
1.4.1
FN
192.168.1.217:4782
5c3e1592-9532-4a55-9a67-38ea1d723d1f
-
encryption_key
53C48FEB4994411E81FCC7855A2076C90E2AC3C1
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Update
-
subdirectory
FN
Targets
-
-
Target
SerialChecker.exe
-
Size
3.1MB
-
MD5
70fa564a25bdd50a78764228f591f9a0
-
SHA1
2d025703005c25bc35b4755321844f3adc41c974
-
SHA256
9fda62581f43e3936e371ced328374f97a7ede2b9fff3748bf618977b1da495a
-
SHA512
ce33af378f45752148de566ec1281a4e212b5af8e9d9d942f833f8d35a5c5d84f8657f17dc053d4bd56ae6ea556122de8039d0cab8c37d6eb5af9f89041eaff3
-
SSDEEP
49152:Ovkt62XlaSFNWPjljiFa2RoUYIbnp9nr1oGdI2THHB72eh2NT:Ov462XlaSFNWPjljiFXRoUYI7p9nZ
-
Quasar family
-
Quasar payload
-
Executes dropped EXE
-