General
-
Target
https://github.com/S0UlS1232/AWP.GG-CRACKED/blob/main/Awp.gg%20CRACKED.exe
-
Sample
241219-yc9d6axrbv
Score
10/10
Malware Config
Extracted
Family
quasar
Version
1.4.1
Botnet
Office04
C2
192.168.1.19:4782
Mutex
cbd5bb11-a5b0-4dee-8e4b-bb4f3dacc71d
Attributes
-
encryption_key
17F9A06104A1A84BB74B1E617E0D5896149A2953
-
install_name
Solora.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Windows Defender
-
subdirectory
SubDir
Targets
-
-
Target
https://github.com/S0UlS1232/AWP.GG-CRACKED/blob/main/Awp.gg%20CRACKED.exe
Score10/10-
Quasar RAT
Quasar is an open source Remote Access Tool.
-
Quasar family
-
Quasar payload
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-