General
-
Target
rbxfpsunlocker.exe
-
Size
3.1MB
-
Sample
241230-c7trasvqew
-
MD5
09a5b059ce629f09d69e340065aeb553
-
SHA1
6b6bff18c4452a25107210a6b59f298229e4ac95
-
SHA256
ec46dd64a026223ff115efdc51fd486069607041025e89d51f25d112cf33b77e
-
SHA512
ce94308bf44567e776e54606308089ddc3505c2cd1a8481d37ad128c6edfa1c2a9df418cb7865329ac1901e4c524d8c01042bd1471672a18721f2a9a25dab0bb
-
SSDEEP
49152:Cvdt62XlaSFNWPjljiFa2RoUYIJeRJ6gbR3LoGdOTHHB72eh2NT:Cvf62XlaSFNWPjljiFXRoUYIJeRJ66
Behavioral task
behavioral1
Sample
rbxfpsunlocker.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
rbxfpsunlocker.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
rbxfpsunlocker.exe
Resource
win10ltsc2021-20241023-en
Malware Config
Extracted
quasar
1.4.1
beamed
192.168.203.82:4782
3dad94cd-63f6-460a-a986-b1841d5dfefe
-
encryption_key
DE46F816EBC96DE37F9233DDE7709263C7680426
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
JavaUpdate
-
subdirectory
SubDir
Targets
-
-
Target
rbxfpsunlocker.exe
-
Size
3.1MB
-
MD5
09a5b059ce629f09d69e340065aeb553
-
SHA1
6b6bff18c4452a25107210a6b59f298229e4ac95
-
SHA256
ec46dd64a026223ff115efdc51fd486069607041025e89d51f25d112cf33b77e
-
SHA512
ce94308bf44567e776e54606308089ddc3505c2cd1a8481d37ad128c6edfa1c2a9df418cb7865329ac1901e4c524d8c01042bd1471672a18721f2a9a25dab0bb
-
SSDEEP
49152:Cvdt62XlaSFNWPjljiFa2RoUYIJeRJ6gbR3LoGdOTHHB72eh2NT:Cvf62XlaSFNWPjljiFXRoUYIJeRJ66
-
Quasar family
-
Quasar payload
-
Executes dropped EXE
-