General

  • Target

    build_output.rar

  • Size

    6.9MB

  • MD5

    f53d642e1955f1e419bf895efd4bbbb0

  • SHA1

    7611f1267f3d91a20e8002c9160c371172d17257

  • SHA256

    6713e5eafddffdc0d3a53783f28a7256c37cb36991a6bf839c6283b25eba4ad1

  • SHA512

    cb4b4199b39ec2768afc81cbc77afbb67545e7733985b5f53791ce264a7f5489ea5dc84c225dfdd01693908155f85a509848c87fc6f6069935aff53c2757ab55

  • SSDEEP

    196608:vInWyGtInWyGPVW/2nHLkgE+2hQghm3i6pa:vnyGtnyGPM2rkgNgM3fg

Score
10/10

Malware Config

Extracted

Family

quasar

Attributes
  • reconnect_delay

    5000

Signatures

  • Quasar family
  • Quasar payload 2 IoCs
  • Unsigned PE 16 IoCs

    Checks for missing Authenticode signature.

Files

  • build_output.rar
    .rar

    Password: 11

  • build_output/Client.exe
    .exe windows:4 windows x86 arch:x86

    Password: 11

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • build_output/Client.exe.config
    .xml
  • build_output/Microsoft.Bcl.AsyncInterfaces.dll
    .dll windows:4 windows x86 arch:x86

    Password: 11

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • build_output/Microsoft.TestPlatform.AdapterUtilities.dll
    .dll windows:4 windows x86 arch:x86

    Password: 11

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • build_output/Microsoft.VisualStudio.CodeCoverage.Shim.dll
    .dll windows:4 windows x86 arch:x86

    Password: 11

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • build_output/Microsoft.VisualStudio.TestPlatform.MSTest.TestAdapter.dll
    .dll windows:4 windows x86 arch:x86

    Password: 11

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • build_output/Microsoft.VisualStudio.TestPlatform.MSTestAdapter.PlatformServices.Interface.dll
    .dll windows:4 windows x86 arch:x86

    Password: 11

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • build_output/Microsoft.VisualStudio.TestPlatform.MSTestAdapter.PlatformServices.dll
    .dll windows:4 windows x86 arch:x86

    Password: 11

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • build_output/Microsoft.VisualStudio.TestPlatform.TestFramework.Extensions.dll
    .dll windows:4 windows x86 arch:x86

    Password: 11

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • build_output/Microsoft.VisualStudio.TestPlatform.TestFramework.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • build_output/Microsoft.Win32.Registry.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • build_output/Mono.Cecil.Mdb.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • build_output/Mono.Cecil.Pdb.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • build_output/Mono.Cecil.Rocks.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • build_output/NAudio.Asio.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • build_output/NAudio.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • build_output/NAudio.Midi.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • build_output/NAudio.Wasapi.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • build_output/NAudio.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • build_output/NAudio.WinMM.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • build_output/Pulsar.Common.Tests.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • build_output/Pulsar.Common.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • build_output/Pulsar.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • build_output/Pulsar.exe.config
    .xml
  • build_output/Pulsar.p12
  • build_output/System.Buffers.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • build_output/System.IO.Pipelines.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • build_output/System.Memory.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • build_output/System.Numerics.Vectors.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • build_output/System.Runtime.CompilerServices.Unsafe.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • build_output/System.Security.AccessControl.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • build_output/System.Security.Principal.Windows.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • build_output/System.Text.Encodings.Web.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • build_output/System.Threading.Tasks.Extensions.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • build_output/System.ValueTuple.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • build_output/client.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • build_output/config.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • build_output/protobuf-net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • build_output/settings.xml