General
-
Target
7f5817c430e3906dbf287f92d2f5b140272644d7b2e902d2a343cba51c5bc7e1.exe
-
Size
3.1MB
-
Sample
241219-drpcbawkhq
-
MD5
11563580013b8994395ff739dc37ed4a
-
SHA1
c527a22166dc153687ca33a8d964687459a6b669
-
SHA256
7f5817c430e3906dbf287f92d2f5b140272644d7b2e902d2a343cba51c5bc7e1
-
SHA512
4047470a756067ca4a4a038c080039945f37220fba7554ecad5d4912d4ea8611bd5efa5f72bbc7084ecfdbee3d63e8a163b675639572e2b9f21253f4c6e93e59
-
SSDEEP
49152:6vRt62XlaSFNWPjljiFa2RoUYIfu83oGNZZpTHHB72eh2NT:6vb62XlaSFNWPjljiFXRoUYIfuC
Behavioral task
behavioral1
Sample
7f5817c430e3906dbf287f92d2f5b140272644d7b2e902d2a343cba51c5bc7e1.exe
Resource
win7-20240903-en
Malware Config
Extracted
quasar
1.4.1
Office04
192.168.1.70:4782
4cacefbd-58c1-418c-9da0-e646e1e6fc72
-
encryption_key
772212B3F3C08D6945CE72024D790AD46DD8341D
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
defender
-
subdirectory
SubDir
Targets
-
-
Target
7f5817c430e3906dbf287f92d2f5b140272644d7b2e902d2a343cba51c5bc7e1.exe
-
Size
3.1MB
-
MD5
11563580013b8994395ff739dc37ed4a
-
SHA1
c527a22166dc153687ca33a8d964687459a6b669
-
SHA256
7f5817c430e3906dbf287f92d2f5b140272644d7b2e902d2a343cba51c5bc7e1
-
SHA512
4047470a756067ca4a4a038c080039945f37220fba7554ecad5d4912d4ea8611bd5efa5f72bbc7084ecfdbee3d63e8a163b675639572e2b9f21253f4c6e93e59
-
SSDEEP
49152:6vRt62XlaSFNWPjljiFa2RoUYIfu83oGNZZpTHHB72eh2NT:6vb62XlaSFNWPjljiFXRoUYIfuC
-
Quasar family
-
Quasar payload
-
Executes dropped EXE
-
Drops file in System32 directory
-