General
Static task
static1
URLScan task
urlscan1
Malware Config
Extracted
Family
quasar
Version
1.4.1
Botnet
Victim1
C2
181.215.176.83:4782
Mutex
6f1cfba9-9724-433c-8339-27dccb488538
Attributes
-
encryption_key
022ADDF92789AB2EDC96DBC40B2BBC6D43950778
-
install_name
Chrome.exe
-
log_directory
Application
-
reconnect_delay
3000
-
startup_key
Google Chrome Update
-
subdirectory
Google
Targets
-
-
Target
https://drive.google.com/drive/folders/10giNQ3CzG2OWwqUogveWyzYYsj5zuqD4?usp=drive_link
-
Quasar family
-
Quasar payload
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-