General
-
Target
5f541a16b678fb79fe6dc150a57108881efc9d392e77644024e288a38c02ff29.exe
-
Size
502KB
-
Sample
250118-e2paqstlcm
-
MD5
9aae678c7cea5987d5092a61623207e2
-
SHA1
0243213e394988c281596785b9cdd3c5c8db0253
-
SHA256
5f541a16b678fb79fe6dc150a57108881efc9d392e77644024e288a38c02ff29
-
SHA512
1f4e1df5d6936048456b493ed2d4268f611b94940f51b41c3c70f925306b451201d882e59031c80cd265ecbe84e0e22f57cc2f5446a9390a87973254db034be9
-
SSDEEP
12288:1TEgdfYXxURT3qh4kywJUpvZKJyRXMUykUcdW:WUw+25ywJUpvZKJGn8cdW
Behavioral task
behavioral1
Sample
5f541a16b678fb79fe6dc150a57108881efc9d392e77644024e288a38c02ff29.exe
Resource
win7-20240903-en
Malware Config
Extracted
quasar
1.4.0
Office04
93.177.102.208:1337
b1f80fe6-27eb-4a1c-bb91-851d5cd8d500
-
encryption_key
9C554DBE5929DA2C3E389A9DF35A30153D68038C
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Java Updater
-
subdirectory
SubDir
Targets
-
-
Target
5f541a16b678fb79fe6dc150a57108881efc9d392e77644024e288a38c02ff29.exe
-
Size
502KB
-
MD5
9aae678c7cea5987d5092a61623207e2
-
SHA1
0243213e394988c281596785b9cdd3c5c8db0253
-
SHA256
5f541a16b678fb79fe6dc150a57108881efc9d392e77644024e288a38c02ff29
-
SHA512
1f4e1df5d6936048456b493ed2d4268f611b94940f51b41c3c70f925306b451201d882e59031c80cd265ecbe84e0e22f57cc2f5446a9390a87973254db034be9
-
SSDEEP
12288:1TEgdfYXxURT3qh4kywJUpvZKJyRXMUykUcdW:WUw+25ywJUpvZKJGn8cdW
-
Quasar family
-
Quasar payload
-
Executes dropped EXE
-