General
- Target friendlypuppy.exe
- Size 953KB
- Sample260506-bbkcbac13m
- SHA256 8a69e28e81c93f1718f2eac0de704f56d3f629ded37ee46c749c63a8c0594976
- MD5 5b47a139cf7e73c5659f1376994dcd0e
- SHA1 159f1298a6648e3639c7d68b7a5cbbf47abfb00f
- SHA512 dfa2fb7f231d67be2b21f1fa91ad95507b8a1fca8eef69445b7f03f7d7f41849e016a93d4e0c83f6f33d25e28981e315dda03d1907bc2a05730f3b553d33d143
- SSDEEP 24576:XF/pjxJzck+uGW/yFoBkkAQmfdxLENcRZHxcjk:XF/pjTYjqqanTmf/R7cj
- TLSH T11D25C09173F4860AE1FF1B79A47249094BB7B9529936DB4F0D8890AD2EB3740CF107A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
friendlypuppy.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
quasar
Attributes
-
encryption_key
53EADF2DF9A7625237BC0B5B38ED7EC2FBD25878
-
key_salt
5a23f8394640cb9e40658446a04c0bbae82dc93d0470e1b2a406a90fd2520382
-
reconnect_delay
3000
Targets
-
- Target friendlypuppy.exe
- Size 953KB
- SHA256 8a69e28e81c93f1718f2eac0de704f56d3f629ded37ee46c749c63a8c0594976
- MD5 5b47a139cf7e73c5659f1376994dcd0e
- SHA1 159f1298a6648e3639c7d68b7a5cbbf47abfb00f
- SHA512 dfa2fb7f231d67be2b21f1fa91ad95507b8a1fca8eef69445b7f03f7d7f41849e016a93d4e0c83f6f33d25e28981e315dda03d1907bc2a05730f3b553d33d143
- SSDEEP 24576:XF/pjxJzck+uGW/yFoBkkAQmfdxLENcRZHxcjk:XF/pjTYjqqanTmf/R7cj
- TLSH T11D25C09173F4860AE1FF1B79A47249094BB7B9529936DB4F0D8890AD2EB3740CF107A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Quasar payload