General
-
Target
695bc096a65c4bd026b95d5363a4b9c316cec8fec3672808e036081397da6df8.exe
-
Size
3.1MB
-
Sample
241218-c45dma1jem
-
MD5
fc6a9a66fb9a404078fe5c31d73c3bab
-
SHA1
2cfb6b088ed8ab7ca66299d094813ce2d04e5677
-
SHA256
695bc096a65c4bd026b95d5363a4b9c316cec8fec3672808e036081397da6df8
-
SHA512
5edd45b69ca36e87ae399eb8260eb47411575a7b8296007b948b8a7c4b8200c0bda115cd223029bf39095d64a5e1c0dbd381d4b6947a67560e0a9142e18a642f
-
SSDEEP
49152:3vFt62XlaSFNWPjljiFa2RoUYIDew65Bxz/oGdVaTHHB72eh2NT:3v362XlaSFNWPjljiFXRoUYIZ6d
Behavioral task
behavioral1
Sample
695bc096a65c4bd026b95d5363a4b9c316cec8fec3672808e036081397da6df8.exe
Resource
win7-20240903-en
Malware Config
Extracted
quasar
1.4.1
Office04
104.251.123.245:23600
4119a2e0-4ae4-4843-8534-99af91a2475d
-
encryption_key
DF6316067206E09C1F85138FCEBD56F5D94BF6AE
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Startup
-
subdirectory
SubDir
Targets
-
-
Target
695bc096a65c4bd026b95d5363a4b9c316cec8fec3672808e036081397da6df8.exe
-
Size
3.1MB
-
MD5
fc6a9a66fb9a404078fe5c31d73c3bab
-
SHA1
2cfb6b088ed8ab7ca66299d094813ce2d04e5677
-
SHA256
695bc096a65c4bd026b95d5363a4b9c316cec8fec3672808e036081397da6df8
-
SHA512
5edd45b69ca36e87ae399eb8260eb47411575a7b8296007b948b8a7c4b8200c0bda115cd223029bf39095d64a5e1c0dbd381d4b6947a67560e0a9142e18a642f
-
SSDEEP
49152:3vFt62XlaSFNWPjljiFa2RoUYIDew65Bxz/oGdVaTHHB72eh2NT:3v362XlaSFNWPjljiFXRoUYIZ6d
-
Quasar family
-
Quasar payload
-
Executes dropped EXE
-