General
-
Target
Client-built.exe
-
Size
3.1MB
-
Sample
250121-whg6rawmck
-
MD5
9f21cf43d032fc842837ef4b192140aa
-
SHA1
20464f746717ef1d9e7d4424a489bb07f9e0fc43
-
SHA256
705a6a49aa16e995ea92d6f866a61c5d4e7b9eb4ec9986af35ce5b488c45fbb9
-
SHA512
30ebc041afb9ca8990787a60bb3be189926e61c42897e99dd1b1a05a87a1a1679c0a60466670e3be0bf485d5aadf5898e993e1b883cdd924d7bfec56b0f9ad6f
-
SSDEEP
49152:CvIt62XlaSFNWPjljiFa2RoUYIL5zapoGBXTHHB72eh2NT:CvE62XlaSFNWPjljiFXRoUYIL5z2
Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win7-20240903-en
Malware Config
Extracted
quasar
1.4.1
Client
45.202.32.36:1111
30f39ce2-55fb-4edc-9531-3fb9e6ba4912
-
encryption_key
9ABAA568E3BFACC1828658EB883F521748218E8E
-
install_name
Updaterr.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Updater
-
subdirectory
Discord
Targets
-
-
Target
Client-built.exe
-
Size
3.1MB
-
MD5
9f21cf43d032fc842837ef4b192140aa
-
SHA1
20464f746717ef1d9e7d4424a489bb07f9e0fc43
-
SHA256
705a6a49aa16e995ea92d6f866a61c5d4e7b9eb4ec9986af35ce5b488c45fbb9
-
SHA512
30ebc041afb9ca8990787a60bb3be189926e61c42897e99dd1b1a05a87a1a1679c0a60466670e3be0bf485d5aadf5898e993e1b883cdd924d7bfec56b0f9ad6f
-
SSDEEP
49152:CvIt62XlaSFNWPjljiFa2RoUYIL5zapoGBXTHHB72eh2NT:CvE62XlaSFNWPjljiFXRoUYIL5z2
-
Quasar family
-
Quasar payload
-
Executes dropped EXE
-