General
-
Target
bb72088c6564bedd1c62d1819e6b6b6815e093f36560d7d3db0c6f4f58b2c9c8N.exe
-
Size
3.1MB
-
Sample
250116-2waaystnbq
-
MD5
94848fcd4bf5aebebc8743d7fc61deb0
-
SHA1
29e05044af8bb2c017bd63c5c87812faf9c83e1f
-
SHA256
bb72088c6564bedd1c62d1819e6b6b6815e093f36560d7d3db0c6f4f58b2c9c8
-
SHA512
0fef5812657ba4545532cd004365b17b54934f778846586f7369327f4937b65c05f71cc7f2acf8d267eae74ed45bd596d31a5685ea5bbee557d8aca2ba703ea8
-
SSDEEP
49152:Ovtt62XlaSFNWPjljiFa2RoUYIcmRJ6DbR3LoGd8DTHHB72eh2NT:OvP62XlaSFNWPjljiFXRoUYIcmRJ61
Behavioral task
behavioral1
Sample
bb72088c6564bedd1c62d1819e6b6b6815e093f36560d7d3db0c6f4f58b2c9c8N.exe
Resource
win7-20241010-en
Malware Config
Extracted
quasar
1.4.1
Office06
154.216.19.77:7000
1e8aec43-b30a-4c63-9211-c18c9decd0e0
-
encryption_key
2A64449428B4580ED5FC6EE66024E26C725626BE
-
install_name
s.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
ssssss
-
subdirectory
dir
Targets
-
-
Target
bb72088c6564bedd1c62d1819e6b6b6815e093f36560d7d3db0c6f4f58b2c9c8N.exe
-
Size
3.1MB
-
MD5
94848fcd4bf5aebebc8743d7fc61deb0
-
SHA1
29e05044af8bb2c017bd63c5c87812faf9c83e1f
-
SHA256
bb72088c6564bedd1c62d1819e6b6b6815e093f36560d7d3db0c6f4f58b2c9c8
-
SHA512
0fef5812657ba4545532cd004365b17b54934f778846586f7369327f4937b65c05f71cc7f2acf8d267eae74ed45bd596d31a5685ea5bbee557d8aca2ba703ea8
-
SSDEEP
49152:Ovtt62XlaSFNWPjljiFa2RoUYIcmRJ6DbR3LoGd8DTHHB72eh2NT:OvP62XlaSFNWPjljiFXRoUYIcmRJ61
-
Quasar family
-
Quasar payload
-
Executes dropped EXE
-