Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

8e5a34b932...92.exe

windows7-x64

10

8e5a34b932...92.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e5a34b932374eae6c3d0d71bef8d34f4f91cc31908ff596533f5fec1a5ff592.exe

  • Size

    3.1MB

  • MD5

    02130800d200407967cb08abbb0aeefe

  • SHA1

    6df9a3b4879c3d34b51826bd1d9ad0f64c93d11e

  • SHA256

    8e5a34b932374eae6c3d0d71bef8d34f4f91cc31908ff596533f5fec1a5ff592

  • SHA512

    dccf995ac63f9386c909608bd948fe41b64aae9df87c6db2cf158de933dd3d8eaabd3215da98911d51af48fab71b992ea72eed3d807c4ebe0d6ef9927c78a84d

  • SSDEEP

    49152:nvrlL26AaNeWgPhlmVqvMQ7XSKvgEcqBxZCoGdYTHHB72eh2NT:nvRL26AaNeWgPhlmVqkQ7XSKHcd

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Office04

C2

suport24.ddns.net:4782

192.168.1.74:4782
Mutex

b4ad83f8-b608-477d-8395-2274bcaab6d1

Attributes
  • encryption_key

    62EF51244AF3535A6A9C77206CD89D5BFECD7E4E

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8e5a34b932374eae6c3d0d71bef8d34f4f91cc31908ff596533f5fec1a5ff592.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.