Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Client-built.exe

windows10-ltsc 2021-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Client-built.exe

  • Size

    3.1MB

  • MD5

    bb394e24cefb7def4a58be7a086c1b6e

  • SHA1

    ca0ee7eb98f7f3fac0dbb64178e8bbdb6a85688e

  • SHA256

    043bd9f70265da014b6ca98126748570265db535b8105d5ef9ee5b9d4064c9ed

  • SHA512

    4acab7609b1ccbaf5a37e3239db135c350edad82caefa28f46dbbcf68ba002b9ca42765f96e7df7899c9a29e6f570f20c1a1455ddd0b3ac5f2a3017f9dbf02db

  • SSDEEP

    49152:DvzlL26AaNeWgPhlmVqvMQ7XSKixRJ6fbR3LoGdctTHHB72eh2NT:DvpL26AaNeWgPhlmVqkQ7XSKixRJ6x

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Office04

C2

192.168.0.169:4782

Mutex

d1633e8d-888a-4785-b591-7ddec8df31a6

Attributes
  • encryption_key

    E2C0A8DE00F91C56BBD30BD99E29F3EB6F0E59DB

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client-built.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.