Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
unbanned.gg spoofer.exe
-
Size
3.1MB
-
Sample
250129-yf7pqswpcq
-
MD5
9c617cd34c3c1c795cade6a9913cb590
-
SHA1
cc1e86c583db79b767bfa4df2952f8f8c33a5358
-
SHA256
1498c903d464042097d53f3b8bc9d88e2075d18391f8796a4e677aab34b0e61b
-
SHA512
af3d317f2d11058fe2e8c72053080c66b22b6cefc73faee284e0918c6ae9e15d02e4c70a002680c3d6d11dad99c1a9f669a5a55048218829f6ae5b2b8a585a78
-
SSDEEP
49152:3vUt62XlaSFNWPjljiFa2RoUYIq0t5CQGoGdSJTHHB72eh2NT:3vI62XlaSFNWPjljiFXRoUYIq0t5Cj
Behavioral task
behavioral1
Sample
unbanned.gg spoofer.exe
Resource
win7-20240903-en
Malware Config
Extracted
quasar
1.4.1
Office04
10.0.4.10:4782
48bca1e6-68db-40be-a831-dfa3a16995e2
-
encryption_key
049A72C22E76D84F19B072A79697CD71F87E3AA6
-
install_name
unbanned.gg spoofer.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
unbanned.gg
-
subdirectory
SubDir
Targets
-
-
Target
unbanned.gg spoofer.exe
-
Size
3.1MB
-
MD5
9c617cd34c3c1c795cade6a9913cb590
-
SHA1
cc1e86c583db79b767bfa4df2952f8f8c33a5358
-
SHA256
1498c903d464042097d53f3b8bc9d88e2075d18391f8796a4e677aab34b0e61b
-
SHA512
af3d317f2d11058fe2e8c72053080c66b22b6cefc73faee284e0918c6ae9e15d02e4c70a002680c3d6d11dad99c1a9f669a5a55048218829f6ae5b2b8a585a78
-
SSDEEP
49152:3vUt62XlaSFNWPjljiFa2RoUYIq0t5CQGoGdSJTHHB72eh2NT:3vI62XlaSFNWPjljiFXRoUYIq0t5Cj
-
Quasar family
-
Quasar payload
-
Executes dropped EXE
-