General

  • Target
    https://github.com/GITMAN392/TlineDTASLOILeaked/
  • Sample260806-ae8nmsal3w

Malware Config

Extracted

Family
  • quasar

Version
  • 1.4.1

Botnet
  • TlineModManager

C2
  • 51.191.214.249:4782

  • 127.0.0.1:443

  • 51.191.214.249:80

  • 51.191.214.249:53

Mutex
  • 92a0395a-cb1e-419a-a316-52cf83ce51db

Attributes
  • encryption_key

    C7AFCE6479CC7A48711876BFC546FFAE5D4DBE10

  • install_name

    Helper.exe

  • key_salt

    bfeb1e56fbcd973bb219022430a57843003d5644d21e62b9d4f180e7e6c33941

  • log_directory

    Logs

  • reconnect_delay

    300

  • startup_key

    sysrun

  • subdirectory

    EpicGames

Targets

MITRE ATT&CK Enterprise v16

Tasks