General
- Target https://github.com/GITMAN392/TlineDTASLOILeaked/
- Sample260806-ae8nmsal3w
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://github.com/GITMAN392/TlineDTASLOILeaked/
Resource
win11-20260513-en
16 signatures
150 seconds
Malware Config
Extracted
Family
-
quasar
Version
-
1.4.1
Botnet
-
TlineModManager
C2
-
51.191.214.249:4782
-
127.0.0.1:443
-
51.191.214.249:80
-
51.191.214.249:53
Mutex
-
92a0395a-cb1e-419a-a316-52cf83ce51db
Attributes
-
encryption_key
C7AFCE6479CC7A48711876BFC546FFAE5D4DBE10
-
install_name
Helper.exe
-
key_salt
bfeb1e56fbcd973bb219022430a57843003d5644d21e62b9d4f180e7e6c33941
-
log_directory
Logs
-
reconnect_delay
300
-
startup_key
sysrun
-
subdirectory
EpicGames
Targets
-
- Target https://github.com/GITMAN392/TlineDTASLOILeaked/
-
Quasar payload
-
Executes dropped EXE