Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Client-built.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Client-built.exe

  • Size

    1.3MB

  • MD5

    24c71e4e30536468929c5389a89b362c

  • SHA1

    d5b89ee8a110431c464170cad3b3ab3aac8a579f

  • SHA256

    d95db1b044e9f20d4d56ff93904dadf7272ce22c1dd2b625443636e90d0ba3e5

  • SHA512

    77d2b579303d5cd250f5f58c78915e9711f6d5b669d1fe582fcac01bba9e5bc73de2018326a139770bad2d96d81a2e5f5f55cf3ba3eafd8b3b859ed0f2598a2f

  • SSDEEP

    24576:tWO+qYjCoYsv+H5meSWHIPbcNK0KKfaOwI55l2SVcwVN/dEfVKfjFq:tWLx8EgKKHwCBVcEjiKfj

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.5.0

Botnet

Office04

C2

147.185.221.26:12171

Mutex

87f86d42-0aec-44a5-b746-a8803e2e4ead

Attributes
  • encryption_key

    251B3D6D57078758B504E154DF6317D159089F09

  • install_name

    svchost.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Update

  • subdirectory

    en-AR

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client-built.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections