Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Client-built.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Client-built.exe

  • Size

    1.3MB

  • Sample

    250326-amjz9aykw6

  • MD5

    24c71e4e30536468929c5389a89b362c

  • SHA1

    d5b89ee8a110431c464170cad3b3ab3aac8a579f

  • SHA256

    d95db1b044e9f20d4d56ff93904dadf7272ce22c1dd2b625443636e90d0ba3e5

  • SHA512

    77d2b579303d5cd250f5f58c78915e9711f6d5b669d1fe582fcac01bba9e5bc73de2018326a139770bad2d96d81a2e5f5f55cf3ba3eafd8b3b859ed0f2598a2f

  • SSDEEP

    24576:tWO+qYjCoYsv+H5meSWHIPbcNK0KKfaOwI55l2SVcwVN/dEfVKfjFq:tWLx8EgKKHwCBVcEjiKfj

Score
10/10
quasaroffice04spywaretrojan

Malware Config

Extracted

Family

quasar

Version

1.5.0

Botnet

Office04

C2

147.185.221.26:12171

Mutex

87f86d42-0aec-44a5-b746-a8803e2e4ead

Attributes
  • encryption_key

    251B3D6D57078758B504E154DF6317D159089F09

  • install_name

    svchost.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Update

  • subdirectory

    en-AR

Targets

    • Target

      Client-built.exe

    • Size

      1.3MB

    • MD5

      24c71e4e30536468929c5389a89b362c

    • SHA1

      d5b89ee8a110431c464170cad3b3ab3aac8a579f

    • SHA256

      d95db1b044e9f20d4d56ff93904dadf7272ce22c1dd2b625443636e90d0ba3e5

    • SHA512

      77d2b579303d5cd250f5f58c78915e9711f6d5b669d1fe582fcac01bba9e5bc73de2018326a139770bad2d96d81a2e5f5f55cf3ba3eafd8b3b859ed0f2598a2f

    • SSDEEP

      24576:tWO+qYjCoYsv+H5meSWHIPbcNK0KKfaOwI55l2SVcwVN/dEfVKfjFq:tWLx8EgKKHwCBVcEjiKfj

    Score
    10/10
    quasaroffice04spywaretrojan
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks