Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
21/01/2025, 02:46 UTC
General
-
Target
Quasar-master/Quasar.Server/Forms/FrmSettings.js
-
Size
5KB
-
MD5
57792b5a2c8ec1848c3b6ec4b224f3f6
-
SHA1
c5138b5ca99869e9e9c2b161e5c50a603ba3274c
-
SHA256
1fa5f30d828555f6e28f5ad34e74bad561725dcd90f8206e27cb664e4d067a2f
-
SHA512
d6f2d2bc05b992c49d95a771138d1e185269fd59956cec0af47a7e10b98a485bf0aea00346f7ab4c13ea2e67e8da99d0ffb8b4d17f545d092aaaed751384c2f1
-
SSDEEP
96:1jecS6GqPdGNlYraPEoVjCtgNjT1VLR0/3It/RL:5fdGHgasoVjCtgJ1syL
Score
3/10
Malware Config
Signatures
-
Command and Scripting Interpreter: JavaScript 1 TTPs
Processes
-
C:\Windows\system32\wscript.exewscript.exe C:\Users\Admin\AppData\Local\Temp\Quasar-master\Quasar.Server\Forms\FrmSettings.js1⤵
Network
-
DNS13.227.111.52.in-addr.arpaRemote address:8.8.8.8:53Request13.227.111.52.in-addr.arpaIN PTRResponse -
DNS5.173.189.20.in-addr.arpaRemote address:8.8.8.8:53Request5.173.189.20.in-addr.arpaIN PTRResponse
No results found
-
8.8.8.8:5313.227.111.52.in-addr.arpadns
DNS Request
13.227.111.52.in-addr.arpa
DNS Request
5.173.189.20.in-addr.arpa