Overview

overview

10

Static

static

1

URLScan

urlscan

1

https://www.mediafir...

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    https://www.mediafire.com/file/u41tw9kf0hqa24a/RobloxThank.rar/file

  • Sample

    250116-18ewja1qh1

Score
10/10
quasaroffice04discoveryspywaretrojan

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Office04

C2

192.168.40.122:4782

rayanneaa-47070.portmap.host:47070
Mutex

fadb7f53-773f-4fb5-a4c6-eb00cc7b35ca

Attributes
  • encryption_key

    F38746D956F52C2D74C5EA46908D0B22D4BB8A0C

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Targets

MITRE ATT&CK Enterprise v15

Tasks