Overview
overview
10Static
static
10build_outp...nt.exe
windows10-2004-x64
10build_outp...nt.exe
windows11-21h2-x64
10build_outp...es.dll
windows10-2004-x64
1build_outp...es.dll
windows11-21h2-x64
1build_outp...es.dll
windows10-2004-x64
1build_outp...es.dll
windows11-21h2-x64
1build_outp...im.dll
windows10-2004-x64
1build_outp...im.dll
windows11-21h2-x64
1build_outp...er.dll
windows10-2004-x64
1build_outp...er.dll
windows11-21h2-x64
1build_outp...ce.dll
windows10-2004-x64
1build_outp...ce.dll
windows11-21h2-x64
1build_outp...es.dll
windows10-2004-x64
1build_outp...es.dll
windows11-21h2-x64
1build_outp...ns.dll
windows10-2004-x64
1build_outp...ns.dll
windows11-21h2-x64
1build_outp...rk.dll
windows10-2004-x64
1build_outp...rk.dll
windows11-21h2-x64
1build_outp...ry.dll
windows10-2004-x64
1build_outp...ry.dll
windows11-21h2-x64
1build_outp...db.dll
windows10-2004-x64
1build_outp...db.dll
windows11-21h2-x64
1build_outp...db.dll
windows10-2004-x64
1build_outp...db.dll
windows11-21h2-x64
1build_outp...ks.dll
windows10-2004-x64
1build_outp...ks.dll
windows11-21h2-x64
1build_outp...io.dll
windows10-2004-x64
1build_outp...io.dll
windows11-21h2-x64
1build_outp...re.dll
windows10-2004-x64
1build_outp...re.dll
windows11-21h2-x64
1build_outp...di.dll
windows10-2004-x64
1build_outp...di.dll
windows11-21h2-x64
1General
-
Target
build_output.rar
-
Size
6.9MB
-
Sample
250419-qlk4xsyqy7
-
MD5
f53d642e1955f1e419bf895efd4bbbb0
-
SHA1
7611f1267f3d91a20e8002c9160c371172d17257
-
SHA256
6713e5eafddffdc0d3a53783f28a7256c37cb36991a6bf839c6283b25eba4ad1
-
SHA512
cb4b4199b39ec2768afc81cbc77afbb67545e7733985b5f53791ce264a7f5489ea5dc84c225dfdd01693908155f85a509848c87fc6f6069935aff53c2757ab55
-
SSDEEP
196608:vInWyGtInWyGPVW/2nHLkgE+2hQghm3i6pa:vnyGtnyGPM2rkgNgM3fg
Behavioral task
behavioral1
Sample
build_output/Client.exe
Resource
win10v2004-20250410-en
Behavioral task
behavioral2
Sample
build_output/Client.exe
Resource
win11-20250410-en
Behavioral task
behavioral3
Sample
build_output/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral4
Sample
build_output/Microsoft.Bcl.AsyncInterfaces.dll
Resource
win11-20250411-en
Behavioral task
behavioral5
Sample
build_output/Microsoft.TestPlatform.AdapterUtilities.dll
Resource
win10v2004-20250410-en
Behavioral task
behavioral6
Sample
build_output/Microsoft.TestPlatform.AdapterUtilities.dll
Resource
win11-20250410-en
Behavioral task
behavioral7
Sample
build_output/Microsoft.VisualStudio.CodeCoverage.Shim.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral8
Sample
build_output/Microsoft.VisualStudio.CodeCoverage.Shim.dll
Resource
win11-20250410-en
Behavioral task
behavioral9
Sample
build_output/Microsoft.VisualStudio.TestPlatform.MSTest.TestAdapter.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral10
Sample
build_output/Microsoft.VisualStudio.TestPlatform.MSTest.TestAdapter.dll
Resource
win11-20250410-en
Behavioral task
behavioral11
Sample
build_output/Microsoft.VisualStudio.TestPlatform.MSTestAdapter.PlatformServices.Interface.dll
Resource
win10v2004-20250313-en
Behavioral task
behavioral12
Sample
build_output/Microsoft.VisualStudio.TestPlatform.MSTestAdapter.PlatformServices.Interface.dll
Resource
win11-20250411-en
Behavioral task
behavioral13
Sample
build_output/Microsoft.VisualStudio.TestPlatform.MSTestAdapter.PlatformServices.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral14
Sample
build_output/Microsoft.VisualStudio.TestPlatform.MSTestAdapter.PlatformServices.dll
Resource
win11-20250410-en
Behavioral task
behavioral15
Sample
build_output/Microsoft.VisualStudio.TestPlatform.TestFramework.Extensions.dll
Resource
win10v2004-20250410-en
Behavioral task
behavioral16
Sample
build_output/Microsoft.VisualStudio.TestPlatform.TestFramework.Extensions.dll
Resource
win11-20250410-en
Behavioral task
behavioral17
Sample
build_output/Microsoft.VisualStudio.TestPlatform.TestFramework.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral18
Sample
build_output/Microsoft.VisualStudio.TestPlatform.TestFramework.dll
Resource
win11-20250410-en
Behavioral task
behavioral19
Sample
build_output/Microsoft.Win32.Registry.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral20
Sample
build_output/Microsoft.Win32.Registry.dll
Resource
win11-20250410-en
Behavioral task
behavioral21
Sample
build_output/Mono.Cecil.Mdb.dll
Resource
win10v2004-20250410-en
Behavioral task
behavioral22
Sample
build_output/Mono.Cecil.Mdb.dll
Resource
win11-20250410-en
Behavioral task
behavioral23
Sample
build_output/Mono.Cecil.Pdb.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral24
Sample
build_output/Mono.Cecil.Pdb.dll
Resource
win11-20250410-en
Behavioral task
behavioral25
Sample
build_output/Mono.Cecil.Rocks.dll
Resource
win10v2004-20250410-en
Behavioral task
behavioral26
Sample
build_output/Mono.Cecil.Rocks.dll
Resource
win11-20250410-en
Behavioral task
behavioral27
Sample
build_output/NAudio.Asio.dll
Resource
win10v2004-20250313-en
Behavioral task
behavioral28
Sample
build_output/NAudio.Asio.dll
Resource
win11-20250410-en
Behavioral task
behavioral29
Sample
build_output/NAudio.Core.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral30
Sample
build_output/NAudio.Core.dll
Resource
win11-20250410-en
Behavioral task
behavioral31
Sample
build_output/NAudio.Midi.dll
Resource
win10v2004-20250314-en
Behavioral task
behavioral32
Sample
build_output/NAudio.Midi.dll
Resource
win11-20250410-en
Malware Config
Extracted
quasar
-
reconnect_delay
5000
Targets
-
-
Target
build_output/Client.exe
-
Size
1.5MB
-
MD5
c5416d7af360068fcdef344602375982
-
SHA1
f3bdd8d22d96d3003b5a66694e3e3e738b226954
-
SHA256
6f6875eb9c2b61d9b51b06fd8b754c5ccae99118aa660eec14dc80863252c1c9
-
SHA512
7047e0e9bbc5bce3514704b29e812d0fd9a4bc75ef81addd5c42cd38beae8b55cb67080d27f8bb85f7e97f6651c871b2b5d04663ec255de4736335267848c6ff
-
SSDEEP
24576:KaKltwDS2eWBRwRR16zhHIPbcNK0KKm77yviUSQaZaOwI55l2S62r9kiwp2Np:KPltwx7wR2EgKKm77LrwCB614
-
Quasar family
-
Quasar payload
-
-
-
Target
build_output/Microsoft.Bcl.AsyncInterfaces.dll
-
Size
25KB
-
MD5
c877d7fe282a56f3bbfa91573d0f56fb
-
SHA1
c74be743bcfc848e06259070b78c50a5d306f1f6
-
SHA256
c8ee1cf1148ebd92318da74edb86952c59ae52d8be0233b0c31658fdf46ba61f
-
SHA512
6dd52cc81c2f971ece97d19511d4908f55357a4c86a3cd7242d61f465c6229f7549a21fc76f6bd79d9ce043947c3d24b6a3f705475ff61bde6b7f6e88f55c696
-
SSDEEP
384:a9OJWqnwKBbNAd0VES2j0cX6dAl+NWyVzrdcCgWeR/WyfLXmztvGHRN7fcTR9zNX:kulwKBhfVv2wK5udcC0FjQtaEV9z9
Score1/10 -
-
-
Target
build_output/Microsoft.TestPlatform.AdapterUtilities.dll
-
Size
28KB
-
MD5
2e02f737baabda557d62c88443ae7c01
-
SHA1
a4f3a6a3b7c5d371474fbb9a4d51f0e75ecc0927
-
SHA256
2570cbe12e3f6c177362eaad630b42db3114c2bb74099a0baa2d3abd6bcb5303
-
SHA512
646c34a76dd20c808346e87bd68c6074fddc3194df0cfbab345e2e08d8d480fdecd6e544836a07f74898d4276fd7f30b964aa0fa260178492639913e7beab650
-
SSDEEP
384:MoGlVXd5QgRbo/cqR3gMdny654nKDdhUauvc//FyHRN76JVOY/wR9zmuyzy1:wDOgRcOIUarFu4/M9zmO1
Score1/10 -
-
-
Target
build_output/Microsoft.VisualStudio.CodeCoverage.Shim.dll
-
Size
15KB
-
MD5
b0f2e37dc0fbe6cf01672547f9e56e5b
-
SHA1
2673eb1ab737217e0dc63101d697697c82547185
-
SHA256
3a4ed9b3e4b5d706767ef614b52836250e8abfadb7b8e30e3706c2eb9d1c45e3
-
SHA512
8c5f91a0a7bcd44d3f4a61d7f37f9956f7aa0f1d3585460c2eb1f27bb28e6b959f1e3e7ace6b1fe2c39b06c121d024b6bd383ca3c403ab70dfbb94208476e6de
-
SSDEEP
192:LnIqrxCb3j0WZqnWSW1R7KOTYRHnhWgN7a8WqJ2sJact5equ/X01k9z3Amj7x+M:Ln98j0WZqnWlyHRN799Es56/R9zTjVP
Score1/10 -
-
-
Target
build_output/Microsoft.VisualStudio.TestPlatform.MSTest.TestAdapter.dll
-
Size
155KB
-
MD5
2ddc54871ff84b3692ad11ba4a5ff771
-
SHA1
c5310fea5760851117ec68b66363f65d5fae06a3
-
SHA256
cb1d59fd79a412b1b05a27b32c342cbc85f018a9f1e1d67b43ebe87e43fec0d1
-
SHA512
c4b6f1f0a1517b7669813f58ece0b10432dd85e1769584b5502cbb0bf0b440a56353b1b5142aa024886d0a4cabe9447c8ea6173887ca9c7562e5883deac07ef0
-
SSDEEP
3072:vIOjCZch+OpRvMKZNZ3hy3B5HZtdOu8uThF9hZlJ8jaoY:jGZc5HvMKZ73Y3B5HZtdOu8ShZlJ8+l
Score1/10 -
-
-
Target
build_output/Microsoft.VisualStudio.TestPlatform.MSTestAdapter.PlatformServices.Interface.dll
-
Size
18KB
-
MD5
f0bf68ced49e25d46f470d063b9b2532
-
SHA1
5826195d195ba3317b22fb726e60231e800571ec
-
SHA256
c4494b603ecb322627959b2cd782400405a58051229bd09b108861415b1845aa
-
SHA512
01eff16e40fadab3acc906c3d7b046363649157ff152a58babff0e7300861b16de8254237b6f39dc781bb2b0609f24ec8edbc816b1dda27bfa71d8816c3470c6
-
SSDEEP
384:jFNFUt+ZDmwKCWKhyHRN7/FfsRmuTcR9zuskT:jF7kwDhutERmuU9zuR
Score1/10 -
-
-
Target
build_output/Microsoft.VisualStudio.TestPlatform.MSTestAdapter.PlatformServices.dll
-
Size
111KB
-
MD5
6e970809dfb2a09768bdc1f90ba138e1
-
SHA1
c7d2624aff1f91641cf2bb0fae0ceb109097ca6c
-
SHA256
dd7eda88da0e3843202e51ba2cedc4412a566355c0193b4c781d307d3d1e5a4e
-
SHA512
87dca21ef73a5aab745a6902462c70ba23a6bb14f57c9d89f6a229ee876ba92e927cb0add7ec8a1b2bc12a460f2ff79f6927c48b1f6b71452b3350c154fc781c
-
SSDEEP
1536:iUAeczX41Bugzu2e8vZTydXOBBsjoihtVfKFFeCbMNflzlrWi2QzgNUw8gKAh8Ia:DGX41Qgzu2JQ1oihtVfKyC8zoQMR8I8b
Score1/10 -
-
-
Target
build_output/Microsoft.VisualStudio.TestPlatform.TestFramework.Extensions.dll
-
Size
33KB
-
MD5
e3306bf4a03b415eeaf5e3038245146c
-
SHA1
7c1287fb75cf863bf61d315a5dc6ac21bc224584
-
SHA256
8d1c36b6dced0b1315e71303ef205dbd01d157a4add72d874825e0f26c529aa5
-
SHA512
c1360bfd93a0aedbc06c58c79b3ffd6b5599d70b49f5f894bc793332f27f315ed6e3609984a269201064e73987517109fe6b720cecb38fc67ee08e1258cf843c
-
SSDEEP
768:cfuKfVp4MAfCQxA5Xm9nCSqu1LxWF//dj9zw:64nHI29dqudxWZzw
Score1/10 -
-
-
Target
build_output/Microsoft.VisualStudio.TestPlatform.TestFramework.dll
-
Size
72KB
-
MD5
81930cfe170acd3a8e7498fd706a93c9
-
SHA1
e1868f03638b3b94027afe2c4f1cda84d39c1054
-
SHA256
9dddb3c2958a276f6b6afd9fade11cca191e2f0635f29a39718c60f8f278a4c3
-
SHA512
1120633361c962a6828799898b2c43ef72402f6eec3d40761e875bf5fe08cea77cdef762f6b8840b6a747a534427af2f0b54ae906c39753a7facb17ff52949aa
-
SSDEEP
1536:CHXw2c75z0KqmKkONYfVmiCpmivfD7XXyAHHof0qokuUz2:u+75zamKXqfVmjnD7XXyAozo4i
Score1/10 -
-
-
Target
build_output/Microsoft.Win32.Registry.dll
-
Size
22KB
-
MD5
da40f3db8b34571684c0cb5bcecd2a79
-
SHA1
1c27a41fd84d6bfe99dabae2e59fcf12fccf6213
-
SHA256
619737e2af8fb713085726631dd2e522fe130cac1d388a59c38907a47d7aadea
-
SHA512
e656d72e111eaca7c8e9b7d4106030c1104286395046c2de58a04edd590cb2714dcf3aeca2b93f843b4663f1d1e630cc19f1e4eae2fa62f0d382fa18cc8a5981
-
SSDEEP
384:z8a6WQCgE7MHVia7Z7aLPQmlJLfbTWnWDxW8QHRN74fZalxA2:AJCp70ViyrmlDt84a
Score1/10 -
-
-
Target
build_output/Mono.Cecil.Mdb.dll
-
Size
42KB
-
MD5
2c39a53a61168c8a7a9f53ebdad6137a
-
SHA1
b10ac8325cd72c7a9018af806d75739ab862b4d8
-
SHA256
570a437dea0271d1d5c8b7d6a408b0b2635bdb0e8b8d5051878f3e7fca087f89
-
SHA512
d1987995bb58978a063a195a18ba02908edac02a3e7808e93f8340aa968c9bd74f76d2e6fad8158f72bc3629c1382039863471d51e510bd897187ccdabae8e14
-
SSDEEP
768:wlUj6BAKp/zgvVucdcRsCVKcraB09THkPFtQI4CRIzZwMNTBczwDN:0h3/zgvVPcRrK09HkBAwMNTNN
Score1/10 -
-
-
Target
build_output/Mono.Cecil.Pdb.dll
-
Size
88KB
-
MD5
5f6a2f17f4e792600a13e3771d5ca5ff
-
SHA1
e411b8e51b201c5f389c2388d26735c1e89b3f6f
-
SHA256
50a1a1a79dc86fcfb8b51249b5325a10dd93d193c52999cf6775d25030a4e606
-
SHA512
67af09a5545c6bb0e033cfa09dfc654ce4cd4d22c418402d5a43612eaa6e60b71dca2bf4f796a6027c8e7aece88d418e6e8c469c94c327f5169608e67a3e7a39
-
SSDEEP
1536:TexPta15J8wWI7Kgl74TChe44tALYKXybJG3OoCkvV:TexFafB7q2hwArQJGFhvV
Score1/10 -
-
-
Target
build_output/Mono.Cecil.Rocks.dll
-
Size
29KB
-
MD5
e136924bb4051a462ad90bd14cb0ba41
-
SHA1
8cfeb4034766ce06f9216b1872703015e8ea0e09
-
SHA256
842e09959084eda733aab1a5354d7af79e29594f4d8b91c8792103e5c755ed9b
-
SHA512
1baa852ffa42fd8a743661f003b90c840276b4cd864d5467b8d551454420ea46bb6c97e0dbe832de1e5e0672eb57365332dd5f86ad1df88820300504a3b1ea07
-
SSDEEP
768:628hQuem5RPkF+pXtRx/hRsPveQJcpAUdE3fF7Mtm3M:62gYm5RPv9jjsPveQCdEvF7Mtmc
Score1/10 -
-
-
Target
build_output/NAudio.Asio.dll
-
Size
33KB
-
MD5
eb254b04d63a9f03b77563243805f68f
-
SHA1
b01c83ec51f7a6548d1babb5e5ff8d5b944965a1
-
SHA256
ca03780217139b37f7f5b6921d59defb8d24988315b16b167a77fa88caa7d00f
-
SHA512
af40c8b9753ebd5abdefad82597dcefc3e5272e917657e3cc7d7961ee8e0070c04f964df456eaa92c8ba832b1967f35ac57490fa2adab2164f323e778979ef9c
-
SSDEEP
768:gehRrWpB5henf0HTYdpVCYKo9c1e6ttHjB6Ca:gehRr68M47hGtHF4
Score1/10 -
-
-
Target
build_output/NAudio.Core.dll
-
Size
183KB
-
MD5
48867f392b8e77dc06c062638c6fbd36
-
SHA1
ccc0931e2cf3d6d79e24c1f28d9c96b40c131af6
-
SHA256
fcf493fc47a2f478a65303886b975fbdbf714cbb1f2d79f7fce97e4bb16b01a8
-
SHA512
b536e18c482dcf810ec30b9a943ec06e0ca4f6f2bd8f187b807a9a9fd90d28c4c2fb69bada4766c72e0b7942f5e7d40dd94b193ab01e68f666838698bbb473bc
-
SSDEEP
3072:n5nFpdQWUY6GwfIGsnLRp2qr2eeY0nVuEtEVEOUkk6uSYsM+S76t:jpdQJY6GwfIGyRp2qI/VZtEVETtHG
Score1/10 -
-
-
Target
build_output/NAudio.Midi.dll
-
Size
45KB
-
MD5
3f5c79100f4f7902114c3fcba275c606
-
SHA1
cb874b2a2561239b5b1c30a49574229716f5f62d
-
SHA256
f246e29921797b173b54229685e997a11f9cc388fa1e589c212328abd7a94ebe
-
SHA512
e435b839a769572a251cb07238020f2496bef97949a3b3159e85c12327e4399a2adca67bb5b2a0606318ca9b5c7ea99bf013a431c72034ce51f9224721a4cf79
-
SSDEEP
768:lwuDUaOqgwjYpA2kn+sbS+O/RXgQPODHM0Mx7YlEmmSFyaetiWvmYRMUQ6LUOu5+:lwuDU7fwT2k+sbRMZgQP6HM0Mx7cPXeN
Score1/10 -