Overview

overview

10

Static

static

3

54bc877bd3...40.exe

windows7-x64

1

54bc877bd3...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    54bc877bd313adcbb4f686033605fe37c632b013892f6ab107396c4982f6b740

  • Size

    3.0MB

  • Sample

    250207-3lsvzsvlfn

  • MD5

    76d3c22ade070633a2ada8c98e7b52a6

  • SHA1

    9f2525fa0b45d6f9e9c39afbc23faa82f7ec1091

  • SHA256

    54bc877bd313adcbb4f686033605fe37c632b013892f6ab107396c4982f6b740

  • SHA512

    3f4b65fc285f20b6aed367d76460bfa5be168a8013e76eeb6ae41da0f718b3b1dba4a852b8089dae804b0ad1e875a52b61db95f11829edbb681de2c66c298e5b

  • SSDEEP

    49152:uJZLe2gk2zjxgEHjykoN0zmQY1QyOrdMFv2ZmffawwEfg:uwhjoN0zmxdWqv2Zmff

Score
10/10
quasaroffice365discoveryspywaretrojan

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Office365

C2

0.0.0.0:4444

Mutex

d7e31ae5-01c9-4ae9-9492-b3417015c4f3

Attributes
  • encryption_key

    C0022A95F8CF0711A4CC81872E320305BE1DA33B

  • install_name

    svchost.exe

  • log_directory

    Logs

  • reconnect_delay

    5000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Targets

    • Target

      54bc877bd313adcbb4f686033605fe37c632b013892f6ab107396c4982f6b740

    • Size

      3.0MB

    • MD5

      76d3c22ade070633a2ada8c98e7b52a6

    • SHA1

      9f2525fa0b45d6f9e9c39afbc23faa82f7ec1091

    • SHA256

      54bc877bd313adcbb4f686033605fe37c632b013892f6ab107396c4982f6b740

    • SHA512

      3f4b65fc285f20b6aed367d76460bfa5be168a8013e76eeb6ae41da0f718b3b1dba4a852b8089dae804b0ad1e875a52b61db95f11829edbb681de2c66c298e5b

    • SSDEEP

      49152:uJZLe2gk2zjxgEHjykoN0zmQY1QyOrdMFv2ZmffawwEfg:uwhjoN0zmxdWqv2Zmff

    Score
    10/10
    quasaroffice365discoveryspywaretrojan

    • Quasar RAT

      Quasar is an open source Remote Access Tool.

      trojanspywarequasar

    • Quasar family

      quasar

    • Quasar payload

    • Downloads MZ/PE file

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks