General
-
Target
Client-built1.exe
-
Size
3.1MB
-
Sample
241225-gghnkayrdy
-
MD5
0213a1dc625eaf82e4d4a94ef9155eeb
-
SHA1
af3df68c68a7070079b123ce2f22389a5aa768df
-
SHA256
532a988eeae201a337f328d2120f8af790042da93735c0fc0c17a1063fdf7f60
-
SHA512
67277e020c3776695b2fb854e834a2850dcfd378fed62b84414ead8c1dce7d1859b2799c973f599a4661124912a49c685c8438b3df7e4012ee7777b1ce489f26
-
SSDEEP
49152:Wvkt62XlaSFNWPjljiFa2RoUYIAQYiimzItoGdUTHHB72eh2NT:Wv462XlaSFNWPjljiFXRoUYINYiE
Behavioral task
behavioral1
Sample
Client-built1.exe
Resource
win7-20240903-en
Malware Config
Extracted
quasar
1.4.1
Office04
192.168.20.5:4782
cd5c1121-523a-481c-bbf0-684c5522dd85
-
encryption_key
D49DA0049C9A948B065557C5F7F0C812465A95EA
-
install_name
argonui.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
ArgonUpdater
-
subdirectory
Argon
Targets
-
-
Target
Client-built1.exe
-
Size
3.1MB
-
MD5
0213a1dc625eaf82e4d4a94ef9155eeb
-
SHA1
af3df68c68a7070079b123ce2f22389a5aa768df
-
SHA256
532a988eeae201a337f328d2120f8af790042da93735c0fc0c17a1063fdf7f60
-
SHA512
67277e020c3776695b2fb854e834a2850dcfd378fed62b84414ead8c1dce7d1859b2799c973f599a4661124912a49c685c8438b3df7e4012ee7777b1ce489f26
-
SSDEEP
49152:Wvkt62XlaSFNWPjljiFa2RoUYIAQYiimzItoGdUTHHB72eh2NT:Wv462XlaSFNWPjljiFXRoUYINYiE
-
Quasar family
-
Quasar payload
-
Executes dropped EXE
-