Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
Static task
static1
URLScan task
urlscan1
Malware Config
Extracted
Family
quasar
Version
1.4.1
Botnet
Office04
C2
192.168.101.5:4782
192.168.56.1:4782
Mutex
2f346f7b-7ef9-48a7-aad7-117c99e3b42c
Attributes
-
encryption_key
946B2201F7DE5D3B1BE0E7F90BF962776DDA4F12
-
install_name
Client.exe
-
log_directory
Logs
-
reconnect_delay
3000
-
startup_key
Client
-
subdirectory
SubDir
Targets
-
-
Target
https://drive.google.com/file/d/1kmtgbJkFvC4E6ku3ibDIShctphzZlGxc/view?usp=sharing
-
Quasar family
-
Quasar payload
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-