quasar | 8b2c157588514f8e5210a12c54e5e723cc3d92b0c5b7a30e8343aec6d33837d8 | Triage

Sharing

General

Target

8b2c157588514f8e5210a12c54e5e723cc3d92b0c5b7a30e8343aec6d33837d8.exe
Size

5.5MB
Sample

241220-e59e3s1jap
MD5

68ca89f542a3e864fe99e2391b178e22
SHA1

0ee003ff3b991f0c18e6b3d00f5e7f146ad2b746
SHA256

8b2c157588514f8e5210a12c54e5e723cc3d92b0c5b7a30e8343aec6d33837d8
SHA512

c411060d308d6294687e8590f303e9b2401f881410ff6051cb5d38ade8522ec99975bd8f123705c441021c6932dc2e95a0393e15b44254a738ebfbad8882997a
SSDEEP

98304:Xa03e2tcjbdKWam/b5y1SR8sqnTa0gotgEQQZ/307P6JJeokf65KGmI84:tttcjpKWzY1SR8Tn2gg3Mf0z6CoCsB84

Score

10^/10

quasar senshipepe spyware trojan

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

SenshiPepe

C2

51.15.17.193:4782

Mutex

3cedc6f6-6ab5-4aba-8d7d-5cda1b7ffa72

Attributes

encryption_key
97599F6E5D14A784CC4DD36B18A277119042FDA8
install_name
Client.exe
log_directory
Logs
reconnect_delay
3000
startup_key
Quasar Client Startup
subdirectory
SubDir

Targets

- Target
  
  8b2c157588514f8e5210a12c54e5e723cc3d92b0c5b7a30e8343aec6d33837d8.exe
- Size
  
  5.5MB
- MD5
  
  68ca89f542a3e864fe99e2391b178e22
- SHA1
  
  0ee003ff3b991f0c18e6b3d00f5e7f146ad2b746
- SHA256
  
  8b2c157588514f8e5210a12c54e5e723cc3d92b0c5b7a30e8343aec6d33837d8
- SHA512
  
  c411060d308d6294687e8590f303e9b2401f881410ff6051cb5d38ade8522ec99975bd8f123705c441021c6932dc2e95a0393e15b44254a738ebfbad8882997a
- SSDEEP
  
  98304:Xa03e2tcjbdKWam/b5y1SR8sqnTa0gotgEQQZ/307P6JJeokf65KGmI84:tttcjpKWzY1SR8Tn2gg3Mf0z6CoCsB84
Score

10^/10

quasar senshipepe spyware trojan
- Quasar RAT
  Quasar is an open source Remote Access Tool.
  trojan spyware quasar
- Quasar family
  quasar
- Quasar payload
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

quasarsenshipepespywaretrojan

behavioral2

quasarsenshipepespywaretrojan