General

  • Target

    https://gofile.io/d/1O5ABk

  • Sample

    241225-ghz91ayrgw

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Office04

C2

192.168.20.5:4782

Mutex

cd5c1121-523a-481c-bbf0-684c5522dd85

Attributes
  • encryption_key

    D49DA0049C9A948B065557C5F7F0C812465A95EA

  • install_name

    argonui.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    ArgonUpdater

  • subdirectory

    Argon

Targets

MITRE ATT&CK Enterprise v15

Tasks