General
-
Target
https://cdn.discordapp.com/attachments/1302822452942082088/1322422679780982846/Aimbot_MTA.zip?ex=677ffad8&is=677ea958&hm=865823792051ab2172f22b645478c253ccd3541431f2a6cbd6053af78b9e0077&
-
Sample
250108-x4kz7ssmcp
Score
10/10
Malware Config
Extracted
Family
quasar
Version
1.4.1
Botnet
Office04
C2
azxq0ap.localto.net:3425
Mutex
e51e2b65-e963-4051-9736-67d57ed46798
Attributes
-
encryption_key
AEA258EF65BF1786F0F767C0BE2497ECC304C46F
-
install_name
WindowsUpdate.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
WindowsUpdate
-
subdirectory
SubDir
Targets
-
-
Target
https://cdn.discordapp.com/attachments/1302822452942082088/1322422679780982846/Aimbot_MTA.zip?ex=677ffad8&is=677ea958&hm=865823792051ab2172f22b645478c253ccd3541431f2a6cbd6053af78b9e0077&
Score10/10-
Quasar RAT
Quasar is an open source Remote Access Tool.
-
Quasar family
-
Quasar payload
-
Executes dropped EXE
-