General
Static task
static1
URLScan task
urlscan1
Malware Config
Extracted
Family
quasar
Version
1.4.1
Botnet
Duy
C2
ily.vuivemc.xyz:4782
14.167.107.177:4782
Mutex
c31b9b46-046b-4667-a401-fed2195635d2
Attributes
-
encryption_key
D4025C854CBFF958E14B3B61E32C8A430CD7C80A
-
install_name
deb.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
svchost
-
subdirectory
debugger
Targets
-
-
Target
https://limewire.com/d/a0277023-1257-4da8-9713-5bfa31dd9421#EZTHzEoBf_maTIM6MW-ySbUDLGKVKIeuIZUBcTtVr8s
-
Quasar family
-
Quasar payload
-
Executes dropped EXE
-
Drops file in System32 directory
-