Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Client-built.exe

windows7-x64

10

Client-built.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Client-built.exe

  • Size

    3.1MB

  • Sample

    250114-b9v7gawjfn

  • MD5

    28fa38429cebfbb42d0283c13ecc8efa

  • SHA1

    8fcae55369b62bbebd8dba8558e290e1a3b0d9f7

  • SHA256

    d3562816beddc0f436d4c959ea831d640b88b701a26c349cb31a3df0b0589b3d

  • SHA512

    7aa14716d0e8005749966337cacea11a490d138f80329a64b7684e9b875d5a0d935a1ff3aa8336a7d43d836e5e8c69f0c983eb3bda4d58aa3c64a456ee5288e3

  • SSDEEP

    49152:evaY52fyaSZOrPWluWBuGG5g5hL5xNESEfk/iYLoGdYzdTHHB72eh2NT:evv52fyaSZOrPWluWBDG5g5hNx62

Score
10/10
quasaroffsetspywaretrojan

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Offset

C2

127.0.0.1:4782

Mutex

6210ab1d-dd45-4f17-a324-f24c1474c4d8

Attributes
  • encryption_key

    CABE6FE0988CAB22AE614AA6065A89402DF1C513

  • install_name

    svchost.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    conhost

  • subdirectory

    Windows

Targets

    • Target

      Client-built.exe

    • Size

      3.1MB

    • MD5

      28fa38429cebfbb42d0283c13ecc8efa

    • SHA1

      8fcae55369b62bbebd8dba8558e290e1a3b0d9f7

    • SHA256

      d3562816beddc0f436d4c959ea831d640b88b701a26c349cb31a3df0b0589b3d

    • SHA512

      7aa14716d0e8005749966337cacea11a490d138f80329a64b7684e9b875d5a0d935a1ff3aa8336a7d43d836e5e8c69f0c983eb3bda4d58aa3c64a456ee5288e3

    • SSDEEP

      49152:evaY52fyaSZOrPWluWBuGG5g5hL5xNESEfk/iYLoGdYzdTHHB72eh2NT:evv52fyaSZOrPWluWBDG5g5hNx62

    Score
    10/10
    quasaroffsetspywaretrojan

    • Quasar RAT

      Quasar is an open source Remote Access Tool.

      trojanspywarequasar

    • Quasar family

      quasar

    • Quasar payload

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.